CVE-2026-92983— InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
Quick assessment
Affected
InternLM lmdeploy
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
InternLM 的 LMDeploy 在 0.17.0 及之前版本中，当以 DistServe 的预填充/解码分离（prefill/decode disaggregation）模式运行时，由于代理层（proxy）使用的是面向用户的会话 ID，而非内部调度器的密钥，导致无法正确释放调度器会话。未经身份验证的攻击者可以向代理端点发送补全请求（completion requests），从而累积未释放的调度器元数据和内存，直至预填充工作进程因内存溢出而被系统终止（out-of-memory killed）。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-92983
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
Source: CVE Program / CVE List V5
Vulnerability Description
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate unreleased scheduler metadata and memory until the prefill worker is out-of-memory killed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对已超过有效生命周期的资源丧失索引
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-92983
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-92983
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-92983 (1)
Vendor Advisories for CVE-2026-92983 (1)
Other References for CVE-2026-92983 (2)
IV. Related Vulnerabilities
Same product: lmdeploy
-
CVE-2026-92971
InternLM LMDeploy through 0.17.0 Assertion Denial of Service -
CVE-2025-59953
LMdeploy has Remote Code Execution by Pickle Deserialization -
CVE-2026-76850
LMDeploy Remote Code Execution via Unsafe Pickle Deserializa -
CVE-2026-63764
LMDeploy Server-Side Request Forgery via HTTP Redirect Bypas -
CVE-2026-46517
LMDeploy: Hardcoded trust_remote_code=True is an implicit un
Same vendor: InternLM
-
CVE-2026-92971
InternLM LMDeploy through 0.17.0 Assertion Denial of Service -
CVE-2025-59953
LMdeploy has Remote Code Execution by Pickle Deserialization -
CVE-2026-76850
LMDeploy Remote Code Execution via Unsafe Pickle Deserializa -
CVE-2026-63764
LMDeploy Server-Side Request Forgery via HTTP Redirect Bypas -
CVE-2026-46517
LMDeploy: Hardcoded trust_remote_code=True is an implicit un
Same weakness: CWE-772
-
CVE-2026-20250
Cisco Secure Firewall Adaptive Security Appliance and Secure -
CVE-2026-72931
Windows Secure Socket Tunneling Protocol (SSTP) Denial of Se -
CVE-2026-18149
undici vulnerable to Denial of Service via orphaned RetryHan -
CVE-2026-69664
httpd parks a request worker indefinitely on a malformed chu -
CVE-2026-71380
httpd applies no timeout while receiving a request body, par
V. Comments for CVE-2026-92983
No comments yet