CVE-2025-59953: LMDeploy is a toolkit for compressing, deploying, and serving large language models. Starting in version 0.9.1 and prior

LMDeploy versions 0.9.1 through 0.10.1 contain a remote code execution vulnerability (RCE, where an attacker can run commands on a system they don't own) in its RPC server (a service that handles requests from other computers). The vulnerability exists because the server uses pickle.loads() (a Python function that converts serialized data back into code) directly on incoming messages without checking if they're safe, allowing attackers to execute malicious code.