CVE-2025-3163 — InternLM LMDeploy conf.py open code injection
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/co…
Published: 2025-04-03 · CVSS: 4.8 · CVSS 4.0
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7