CVE-2026-92971: InternLM LMDeploy through 0.17.0 Assertion Denial of Service
InternLM LMDeploy through 0.17.0 contains a reachable assertion vulnerability in the DistServe decode migration loop that allows unauthenticated attackers to terminate the inference engine. Attackers can submit a migrationrequest with an empty remoteblockids list to trigger an AssertionError that crashes the engine loop and causes subsequent inference requests to fail.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this denial of service?
LMDeploy versions through 0.17.0 are affected where the DistServe decode migration path is reachable. The issue can terminate the inference engine, causing subsequent inference requests to fail.
Does exploitation require authentication or user interaction?
No. The vulnerability is reachable by unauthenticated attackers and requires no user interaction or elevated privileges.
What request triggers the crash?
An attacker can submit a migration_request with an empty remote_block_ids list. This triggers an AssertionError in the decode migration loop and crashes the engine loop.