{"data":{"id":"f7e6dcc1-2285-4e2e-b9e0-66ef41b908e9","title":"CVE-2026-46517: LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior…","summary":"CVE-2026-46517 affects LMDeploy, a toolkit for compressing, deploying, and serving large language models, in versions 0.12.3 and prior. The source says a hardcoded \"trust_remote_code=True\" setting enables HF supply-chain RCE without user opt-in. As of publication, no publicly available patches exist.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-46517","publishedAt":"2026-06-10T00:16:53.827Z","cveId":"CVE-2026-46517","cweIds":["CWE-94","CWE-915","CWE-1188"],"cvssScore":"7.8","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":["lmdeploy@<= 0.12.3 (fixed: 0.13.0)"],"affectedPackageNames":["lmdeploy"],"affectedPackageRefs":["pypi:lmdeploy"],"affectedVendors":[],"affectedVendorsRaw":["LMDeploy"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"LMDeploy remote code execution through hardcoded trust_remote_code","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","attackVector":"local","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0.00163,"epssCheckedAt":"2026-11-04T06:10:13.820Z","kevDateAdded":null,"advisoryAliases":["GHSA-9xq9-36w5-q796"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:47:43.295Z","patchAvailable":true,"disclosureDate":"2026-06-10T00:16:53.827Z","fixReleasedAt":"2026-05-12T06:26:04.251Z","daysToFix":-29,"fixCheckedAt":"2026-10-29T21:34:47.072Z","capecIds":["CAPEC-242"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":["AML.T0010"],"fixes":[{"ecosystem":"pypi","name":"lmdeploy","fixedVersion":"0.13.0","matchedVersion":"0.13.0","fixReleasedAt":"2026-05-12T06:26:04.251Z","daysToFix":-29,"match":"ecosystem","source":"registry","status":"found","checkedAt":"2026-10-29T21:34:46.926Z"}]}}