CVE-2026-92971
highInternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to t…
InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with an empty remote_block_ids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Affected products
Not reported by the source (unknown — not "none").
Weakness classification (CWE)
Source: NVD / CISA. “NVD-CWE-Other” and “NVD-CWE-noinfo” mean NVD could not assign a specific weakness.
Mitigation & advisories
No vendor advisory or patch reference tagged by NVD. Check the references below.
References
- https://github.com/InternLM/lmdeploy disclosure@vulncheck.com
- https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/pytorch/engine/engine_loop.py#L... disclosure@vulncheck.com
- https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/pytorch/utils.py#L187-L214 disclosure@vulncheck.com
- https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/serve/openai/endpoints/completi... disclosure@vulncheck.com
- https://github.com/InternLM/lmdeploy/issues/4965 disclosure@vulncheck.com
- https://www.vulncheck.com/advisories/internlm-lmdeploy-through-0.17.0-assertion-denial-of-... disclosure@vulncheck.com
- https://github.com/InternLM/lmdeploy/issues/4965 134c704f-9b21-4f2e-91b3-4a467353bcc0