VULNRABLE / Vulnerability / CVE-2025-59953

CVE-2025-59953

CRITICAL WATCH lmdeploy GHSA

Exploit verdict: CVSS 9.5 · no EPSS data

CVSS Score
9.5
Severity
CRITICAL
EPSS
Source
GHSA

Summary

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

What this means

CVE-2025-59953 is a critical-severity vulnerability affecting lmdeploy, rated CVSS 9.5. Published September 16, 2026.

View full advisory at GHSA →