Threats tagged 'ghsa-fq46-3gxq-v4vc'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-119706InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows Critical9.32026-10-30GCVE DatabaseCVE-2026-119706 InternLM LMDeploy versions 0.9.0 through 0.18.0 have a critical unauthenticated remote code execution vulnerability. Attackers can send specially crafted pickled data to the /update_weights endpoint, which is deserialized without validation, allowing execution of arbitrary OS commands as the api_server process. Report on CVE-2026-119706 Vulnerability CWE-502 #ghsa-fq46-3gxq-v4vc	GCVE Database	2026-10-30

Page 1 of 1