LMDeploy unauthenticated RCE via pickle in /update_weights (CVE-2026-119706), no fixed release yet ยท updates https://pwn.watch/i/lmdeploy-update-weights-pickle-rce-cve-2026-119706 InternLM LMDeploy, an open-source toolkit for serving large language models, has an unauthenticated remote code execution flaw in its api_server (CVE-2026-119706, CVSS 4.0 9.3 / CVSS 3.1 9.8 critical). Versions 0.9.0 through 0.18.0 deserialize a base64-encoded pickle sent in serialized_named_tensors to the POST /update_weights endpoint with ForkingPickler.loads and no validation, so anyone who can reach the server can run OS commands as the api_server process. The bug was reported publicly in GitHub issue #4698 in June 2026; the fix pull request #4964, which makes the HTTP endpoint reject pickle by default, is still open and not in any release. The fix PR notes that the default api_server binds to 0.0.0.0 without API keys. en Fri, 30 Oct 2026 00:00:00 GMT LMDeploy unauthenticated RCE via pickle in /update_weights (CVE-2026-119706), no fixed release yet: VulnCheck publishes CVE-2026-119706 (CVSS 4.0 9.3 critical): unauthenticated RCE in LMDeploy 0.9.0 through 0.18.0 via pickle in /update_weights. The fix PR #4964 (reject pickle on HTTP /update_weights by default) is still open, so no release contains the fix. https://pwn.watch/i/lmdeploy-update-weights-pickle-rce-cve-2026-119706 https://pwn.watch/i/lmdeploy-update-weights-pickle-rce-cve-2026-119706#2026-10-30-4073c8ad Fri, 30 Oct 2026 00:00:00 GMT critical <p><a href="https://www.vulncheck.com/advisories/lmdeploy-0.9.0-through-0.18.0-unauthenticated-rce-via-update-weights-pickle-deserialization">Source</a></p> LMDeploy unauthenticated RCE via pickle in /update_weights (CVE-2026-119706), no fixed release yet: A GitHub issue reports that LMDeploy /update_weights deserializes request-controlled pickle data before validation. https://pwn.watch/i/lmdeploy-update-weights-pickle-rce-cve-2026-119706 https://pwn.watch/i/lmdeploy-update-weights-pickle-rce-cve-2026-119706#2026-06-22-ee9ee9b4 Mon, 22 Jun 2026 00:00:00 GMT critical <p><a href="https://github.com/InternLM/lmdeploy/issues/4698">Source</a></p>