CVE-2025-3163 InternLM LMDeploy conf.py open code injection
Attackers can execute arbitrary code via the conf.py file in InternLM LMDeploy, requiring local access to exploit.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-3163?
CVE-2025-3163 is a medium-severity code injection vulnerability in InternLM LMDeploy, published on 3 Apr 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Which versions are affected by CVE-2025-3163?
3 open source packages ship an affected version, including lmdeploy. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
lmdeploy PyPI | All versions to 0.7.1 | None |
lmdeploy PyPI | All versions to 0.7.1 | None |
lmdeploy PyPI | All versions to 0.7.1 | None |
Products include Internlm Lmdeploy.
How do I fix CVE-2025-3163?
No fix has been published for CVE-2025-3163 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2025-3163 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-3163 exists.
Other vulnerabilities in InternLM LMDeploy
- CVE-2025-67729 lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
- CVE-2026-63764 LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass
- CVE-2026-33626 LMDeploy Vulnerable to Server-Side Request Forgery (SSRF) via Vision-Language Image Loading
- CVE-2025-3162 InternLM LMDeploy PT File utils.py load_weight_ckpt deserialization
Sources
Also known as GHSA-jfvg-qm4p-473x, PYSEC-2026-1579.