CyberRota Analysis
AI-GeneratedInternLM LMDeploy versions up to 0.17.0 are vulnerable due to improper session management, allowing unauthenticated attackers to exploit the proxy endpoint. This can lead to denial-of-service conditions as the system accumulates unreleased scheduler metadata and memory, ultimately resulting in an out-of-memory crash. Organizations using this software should prioritize patching to mitigate the risk of service disruption.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate unreleased scheduler metadata and memory until the prefill worker is out-of-memory killed.