{"metadata": {"vulnerability": "CVE-2025-59953", "count": 19, "kinds": {"milestone": 5, "sighting": 5, "kev": 0, "other": 9}}, "data": [{"timestamp": "2025-09-23T14:33:49.506Z", "date_only": false, "value": "2025-09-23T14:33:49.506Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-59953", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-09-16T15:34:27Z", "date_only": false, "value": "2026-09-16T15:34:27Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5H8J-6CRG-7RMW", "record": "GHSA-5H8J-6CRG-7RMW", "field": "published"}, {"timestamp": "2026-09-16T15:36:02.095Z", "date_only": false, "value": "2026-09-16T15:36:02.095Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-59953", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-09-16T15:36:02.095Z", "date_only": false, "value": "2026-09-16T15:36:02.095Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-59953", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-16T16:17:03Z", "date_only": false, "value": "2026-09-16T16:17:03Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5H8J-6CRG-7RMW", "record": "GHSA-5H8J-6CRG-7RMW", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-09-16T16:17:03.010Z", "date_only": false, "value": "2026-09-16T16:17:03.010", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59953", "record": "FKIE_CVE-2025-59953", "field": "published"}, {"timestamp": "2026-09-16T16:35:02.155Z", "date_only": false, "value": "2026-09-16T16:35:02.155197Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw", "record": "CVE-2025-59953", "field": "creation_timestamp", "uuid": "4e890b4e-1e4e-43d2-b274-cfb49e2f2f9f", "url": "https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw"}, {"timestamp": "2026-09-16T17:20:31.991Z", "date_only": false, "value": "2026-09-16T17:20:31.991608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/cfid76vzr44xo", "record": "CVE-2025-59953", "field": "creation_timestamp", "uuid": "f18edfe9-6618-4c54-a490-73892741de80", "content": "CVE-2025-59953 - LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy\nCVE ID : CVE-2025-59953\n \n Published : Sept. 16, 2026, 3:36 p.m. | 9\u00a0minutes ago\n \n Description : LMDeploy is a toolkit for compressing, deploying,...", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/cfid76vzr44xo"}, {"timestamp": "2026-09-16T18:07:47.772Z", "date_only": false, "value": "2026-09-16T18:07:47.772136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnq7qjmsm25", "record": "CVE-2025-59953", "field": "creation_timestamp", "uuid": "1223e08a-f52d-4c7a-abb4-365f250e7cc0", "content": "\ud83d\udea8 CVE-2025-59953 \u2014 CVSS 9.8 CRITICAL\n\nLMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0....\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2025-59953\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mvnq7qjmsm25"}, {"timestamp": "2026-09-16T18:20:05.843Z", "date_only": false, "value": "2026-09-16T18:20:05.843424Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnqvpl4ba2b", "record": "CVE-2025-59953", "field": "creation_timestamp", "uuid": "04c20391-7b60-4cda-a9c3-4395648b4f8b", "content": "CVE-2025-59953 - lmdeploy\nThe LMdeploy software includes an RPC server that accepts messages and deserializes them without checking their content. An attacker who can send a specially crafted message\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#lmdeploy #internlm #pip #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mvnqvpl4ba2b"}, {"timestamp": "2026-09-16T18:31:42.521Z", "date_only": false, "value": "2026-09-16T18:31:42.521113Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/efe1b2090e21bb0a7cf5f18ce00c2614", "record": "CVE-2025-59953", "field": "creation_timestamp", "uuid": "895e0f16-adab-4d4a-9d0a-58f34809db38", "content": "# CVE-2025-59953: CVE-2025-59953: Unauthenticated Remote Code Execution in LMDeploy AsyncRPCServer via Insecure Pickle Deserialization\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-09-16\n> **Full Report:** https://cvereports.com/reports/CVE-2025-59953\n\n## Summary\nLMDeploy prior to version 0.10.2 is vulnerable to remote code execution because its AsyncRPCServer component implements unauthenticated, remote-accessible communication sockets and uses the insecure pickle.loads() deserializer to process incoming requests.\n\n## TL;DR\nUnauthenticated remote attackers can execute arbitrary code on LMDeploy hosts prior to v0.10.2 by sending a malicious Python pickle stream to the dynamically opened ZMQ RPC port.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-502\n- **Attack Vector**: Network\n- **Complexity**: Low\n- **Privileges Required**: None\n- **EPSS Score**: N/A\n- **Exploit Status**: Proof-of-Concept\n- **CISA KEV Status**: Not Listed\n\n## Affected Systems\n\n- lmdeploy\n- **lmdeploy**: >= 0.9.1, < 0.10.2 (Fixed in: `0.10.2`)\n\n## Mitigation\n\n- Upgrade LMDeploy to 0.10.2 or higher\n- Implement firewall rules to block high random ports\n- Use local container network namespaces without host networking\n- Run services under a non-root low-privileged user account\n\n**Remediation Steps:**\n1. Run pip install --upgrade lmdeploy\n2. Verify local binding in zmq_rpc.py is localhost\n3. Establish micro-segmentation rules on model server host nodes\n\n## References\n\n- [GitHub Security Advisory GHSA-5h8j-6crg-7rmw](https://github.com/InternLM/lmdeploy/security/advisories/GHSA-5h8j-6crg-7rmw)\n- [Commit d86046a0e6b02ecaaf7cdb74346d0477130221c2](https://github.com/InternLM/lmdeploy/commit/d86046a0e6b02ecaaf7cdb74346d0477130221c2)\n- [LMDeploy v0.10.2 Release](https://github.com/InternLM/lmdeploy/releases/tag/v0.10.2)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2025-59953) - Automated Vulnerability Intelligence*", "url": "https://gist.github.com/alon710/efe1b2090e21bb0a7cf5f18ce00c2614"}, {"timestamp": "2026-09-18T18:05:34.211Z", "date_only": false, "value": "2026-09-18T18:05:34.211593Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-59953", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-09-18T18:05:34.211Z", "date_only": false, "value": "2026-09-18T18:05:34.211593Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59953", "record": "FKIE_CVE-2025-59953", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-09-18T18:05:59.705Z", "date_only": false, "value": "2026-09-18T18:05:59.705Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-59953", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-09-18T18:05:59.705Z", "date_only": false, "value": "2026-09-18T18:05:59.705Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-59953", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-09-24T14:47:54Z", "date_only": false, "value": "2026-09-24T14:47:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5H8J-6CRG-7RMW", "record": "GHSA-5H8J-6CRG-7RMW", "field": "modified"}, {"timestamp": "2026-09-24T21:25:27.050Z", "date_only": false, "value": "2026-09-24T21:25:27.050", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-59953", "record": "FKIE_CVE-2025-59953", "field": "lastModified"}, {"timestamp": "2026-10-01T16:38:31.161Z", "date_only": false, "value": "2026-10-01T16:38:31.161755Z", "kind": "milestone", "label": "Published", "source": "pysec \u00b7 PYSEC-2026-4079", "record": "PYSEC-2026-4079", "field": "published"}, {"timestamp": "2026-10-01T17:10:29.586Z", "date_only": false, "value": "2026-10-01T17:10:29.586572Z", "kind": "other", "label": "Updated", "source": "pysec \u00b7 PYSEC-2026-4079", "record": "PYSEC-2026-4079", "field": "modified"}]}