{"data":{"id":"1f2a3880-a756-485f-83a9-536ad5812b1d","title":"GHSA-3hmm-rh5q-gwwr: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading","summary":"LMDeploy, through its latest release, passes the quant_dtype value from a model's HuggingFace quantization_config directly into eval(f'torch.{quant_dtype}') at lmdeploy/pytorch/config.py line 620 with no validation. The AWQ branch does not override this value, so a malicious model can run arbitrary Python when loaded with lmdeploy. The advisory describes this as a supply-chain vector affecting any user who loads an untrusted model.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://github.com/advisories/GHSA-3hmm-rh5q-gwwr","publishedAt":"2026-09-18T17:04:01.000Z","cveId":"CVE-2026-33625","cweIds":null,"cvssScore":null,"cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["lmdeploy@>= 0.12.1, < 0.12.3 (fixed: 0.12.3)"],"affectedPackageNames":["lmdeploy"],"affectedPackageRefs":["pypi:lmdeploy"],"affectedVendors":["HuggingFace"],"affectedVendorsRaw":["LMDeploy","HuggingFace Hub"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00442,"epssCheckedAt":"2026-11-04T18:09:14.876Z","kevDateAdded":null,"advisoryAliases":["GHSA-3hmm-rh5q-gwwr"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":true,"disclosureDate":"2026-09-18T17:04:01.000Z","fixReleasedAt":"2026-04-22T05:36:40.067Z","daysToFix":-149,"fixCheckedAt":"2026-10-29T21:30:28.391Z","capecIds":null,"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"lmdeploy","fixedVersion":"0.12.3","matchedVersion":"0.12.3","fixReleasedAt":"2026-04-22T05:36:40.067Z","daysToFix":-149,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:30:28.246Z"}]}}