<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: internlm-lmdeploy</title><description>Every new CVE for internlm-lmdeploy.</description><link>https://agentprime.io/</link><item><title>CVE-2026-119706: LMDeploy 0.9.0 through 0.18.0 Unauthenticated RCE via /update_weights Pickle Deserialization</title><link>https://agentprime.io/advisories/CVE-2026-119706/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-119706/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 30 Oct 2026 15:16:07 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-92983: InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch</title><link>https://agentprime.io/advisories/CVE-2026-92983/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92983/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 14:22:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-92971: InternLM LMDeploy through 0.17.0 Assertion Denial of Service</title><link>https://agentprime.io/advisories/CVE-2026-92971/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-92971/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 17 Sep 2026 13:43:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-76850: LMDeploy Remote Code Execution via Unsafe Pickle Deserialization in the Disaggregated Serving Peer Connector</title><link>https://agentprime.io/advisories/CVE-2026-76850/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76850/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:41:28 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-63764: LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass</title><link>https://agentprime.io/advisories/CVE-2026-63764/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-63764/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 20:36:58 GMT</pubDate><category>CVE</category></item></channel></rss>