Executive Summary

This vulnerability is an insecure deserialization issue in LMDeploy versions prior to 0.11.1. It occurs because the function torch.load() is called without the weights_only=True parameter when loading model checkpoint files. This allows an attacker to execute arbitrary code on the victim's machine by providing a malicious .bin or .pt model file.

Useful 0 Not Useful 0

Impact Analysis

An attacker can exploit this vulnerability to execute arbitrary code on your machine when you load a malicious model file. This can lead to full compromise of your system, including unauthorized access, data theft, or disruption of services.

Useful 0 Not Useful 0

Mitigation Strategies

Upgrade LMDeploy to version 0.11.1 or later, where the insecure deserialization vulnerability has been patched by adding the weights_only=True parameter to torch.load(). Avoid loading untrusted or malicious .bin or .pt model files to prevent arbitrary code execution.

Useful 0 Not Useful 0