Description
InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with an empty remote_block_ids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.
Published: 2026-09-17
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service
Action: Patch
AI Analysis

Impact

A reachable assertion in the DistServe decode migration loop causes an AssertionError when a migration_request includes an empty remote_block_ids list, crashing the inference engine loop. The crash results in subsequent inference requests failing, providing attackers with a means to disrupt service availability. The weakness is an improper assertion handling flaw, classified as CWE-617.

Affected Systems

The vulnerability affects InternLM LMDeploy versions up to and including 0.17.0. All deployments of this product that have not applied a newer release are potentially exploitable.

Risk and Exploitability

The CVSS score of 8.7 indicates high severity. With no EPSS score available, the likelihood of exploitation is uncertain but the vulnerability is exploitable by unauthenticated users who can reach the migration_request endpoint. The vulnerability is not listed in the CISA KEV catalog. Attackers can trigger the denial of service remotely by sending a crafted migration_request request, which makes the attack vector likely via network traffic to the inference service.

Generated by OpenCVE AI on September 17, 2026 at 21:45 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade to LMDeploy version 0.18.0 or newer, which includes a fix for the assertion bug.
  • If an upgrade is not immediately possible, restrict access to the migration_request endpoint so that only trusted clients can invoke it.
  • Add validation to reject migration_request calls with an empty remote_block_ids list, ensuring the assertion is never reached.

Generated by OpenCVE AI on September 17, 2026 at 21:45 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 17 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 17 Sep 2026 14:00:00 +0000

Type Values Removed Values Added
Description InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migration_request with an empty remote_block_ids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.
Title InternLM LMDeploy through 0.17.0 Assertion Denial of Service
First Time appeared Internlm
Internlm lmdeploy
Weaknesses CWE-617
CPEs cpe:2.3:a:internlm:lmdeploy:*:*:*:*:*:*:*:*
Vendors & Products Internlm
Internlm lmdeploy
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Internlm Lmdeploy
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-09-17T14:29:19.612Z

Reserved: 2026-09-17T13:23:54.594Z

Link: CVE-2026-92971

cve-icon Vulnrichment

Updated: 2026-09-17T14:29:09.606Z

cve-icon NVD

Status : Deferred

Published: 2026-09-17T14:18:03.190

Modified: 2026-09-22T20:53:07.383

Link: CVE-2026-92971

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-17T22:15:13Z

Weaknesses