CVE-2025-3163 | BDVDB-2026-273264 Detail

Description#

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12025-04-03Record published in the CVE List.
2. Version 22025-04-21Most recent update recorded in the CVE List.