Vulnerability · Published Sep 17, 2026 · Assigned by VulnCheck
CVE-2026-92983InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
High 7.5
In plain English
A high-severity security flaw in lmdeploy from InternLM. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 52% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.7%top 48.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate unreleased scheduler metadata and memory until the prefill worker is out-of-memory killed.
Affected products (as reported)
Weakness: CWE-772 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- GitHub Issue #4967 issue-tracking
- https://github.com/InternLM/lmdeploy product
- https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/pytorch/disagg/conn/engine_conn.py#L93-L99 technical-description
- VulnCheck Advisory: InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch third-party-advisory