Skip to content
Noroxi

InternLM records

5 published records for vendor internlm.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 25
  2. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2025-67729
    35Monitor

    lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

    HighCVSS 8.8No exploitEPSS 1%

    internlm · lmdeployDec 26, 2025

  • CVE-2026-33626
    30Monitor

    LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

    HighCVSS 7.5Proof of conceptEPSS 2%

    internlm · lmdeployApr 20, 2026

  • CVE-2026-63764
    30Monitor

    LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass

    HighCVSS 7.7No exploitEPSS 1%

    internlm · lmdeployJul 21, 2026

  • CVE-2025-3163
    19Monitor

    InternLM LMDeploy conf.py open code injection

    MediumCVSS 4.8No exploitEPSS 0%

    internlm · lmdeployApr 3, 2025

  • CVE-2025-3162
    19Monitor

    InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization

    MediumCVSS 4.8No exploitEPSS 0%

    internlm · lmdeployApr 3, 2025