THREATOPS

THREAT OPS › Threat News › [GHSA] GHSA-2vh9-42vm-xmv2 (critical) — LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

[GHSA] GHSA-2vh9-42vm-xmv2 (critical) — LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

highgithub_advisoriesPublished 2026-09-18

GHSA-2vh9-42vm-xmv2 Severity: critical CVE: CVE-2025-66455

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

## Summary

LMDeploy's PyTorch DistServe/PD-disaggregation control plane used `recv_pyobj()` to deserialize messages received through a ZeroMQ PULL socket. PyZMQ implements `recv_pyobj()` using Python p

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

f05b4ad8bf2e2d84101a1d63b3c44fadd99223b2sha1
CVE-2025-66455cve

Original source: https://github.com/advisories/GHSA-2vh9-42vm-xmv2