[GHSA-5h8j-6crg-7rmw] LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

[checkmator]

Updates

• References

Comments
Add the upstream fix commit as a direct reference:

InternLM/lmdeploy@d86046a

The commit changes AsyncRPCServer's bind address from tcp://* to tcp://localhost and adds a warning about code execution through unauthorized network access. The v0.10.2 release already referenced by this advisory lists the corresponding upstream PR #4017.

This directly supports the existing Maintainer assessment describing how version 0.10.2 removes remote network exposure while retaining pickle for the internal RPC protocol. This proposal only adds the fix reference; it does not change the description, affected range, or patched version.

[github]

Hi there @lvhan028! A community member has suggested an improvement to your security advisory. If approved, this change will affect the global advisory listed at github.com/advisories. It will not affect the version listed in your project repository.

This change will be reviewed by our Security Curation Team. If you have thoughts or feedback, please share them in a comment here! If this PR has already been closed, you can start a new community contribution for this advisory

[lvhan028]

Confirmed. This fix reference is accurate and correctly reflects the upstream commit that addressed the remote exposure issue. Thanks to the contributor for the suggestion.