{"id":"CVE-2026-92971","title":"InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine","summary":"InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with a…","severity":"high","cvss":7.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cwe":["CWE-617"],"vendor":"InternLM","product":"lmdeploy","affected":["lmdeploy <= 0.17.0"],"published":"2026-09-17","updated":"2026-09-22","sourceUpdated":"2026-09-22T20:53:07.383","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-92971","references":[{"url":"https://github.com/InternLM/lmdeploy","label":"disclosure@vulncheck.com"},{"url":"https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/pytorch/engine/engine_loop.py#L560-L564","label":"disclosure@vulncheck.com"},{"url":"https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/pytorch/utils.py#L187-L214","label":"disclosure@vulncheck.com"},{"url":"https://github.com/InternLM/lmdeploy/blob/v0.17.0/lmdeploy/serve/openai/endpoints/completions.py#L130-L136","label":"disclosure@vulncheck.com"},{"url":"https://github.com/InternLM/lmdeploy/issues/4965","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/internlm-lmdeploy-through-0.17.0-assertion-denial-of-service","label":"disclosure@vulncheck.com"},{"url":"https://github.com/InternLM/lmdeploy/issues/4965","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"epss":0.00491,"epssPercentile":0.41262,"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-17T14:28:49.666490Z"},"ingestedAt":"2026-09-17T14:19:30.993Z","slug":"CVE-2026-92971","body":"## Overview\n\nInternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with an empty remote_block_ids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":53,"depthScoreParts":{"impact":41.3,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":206170,"id":"CVE-2026-92971","ts":1789658488080,"field":"exploit_available","old":"false","new":"true"}]}