CVE-2026-92983: InternLM LMDeploy through 0.17.0 Memory Exhaustion via Session ID Mismatch
InternLM LMDeploy through 0.17.0 in DistServe prefill/decode disaggregation mode fails to release scheduler sessions because the proxy uses user-facing session IDs instead of internal scheduler keys. Unauthenticated attackers can send completion requests to the proxy endpoint that accumulate unreleased scheduler metadata and memory until the prefill worker is out-of-memory killed.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
InternLM LMDeploy (DistServe prefill/decode disaggregation mode)to a version that resolves this vulnerability.Fixed in 0.17.0 - Compensating control
Restrict/limit access to the proxy endpoint that accepts completion requests so unauthenticated attackers cannot accumulate unreleased scheduler metadata and exhaust memory.
Event History
Frequently Asked Questions
Which deployments are exposed to this denial-of-service issue?
LMDeploy deployments through 0.17.0 are affected when using DistServe prefill/decode disaggregation mode and exposing the proxy endpoint to requests from untrusted users.
What does an attacker need to exploit it?
An attacker does not need authentication or user interaction. They need network access to send completion requests to the proxy endpoint.
What is the expected impact of successful exploitation?
Completion requests can accumulate unreleased scheduler metadata and memory. This can exhaust memory on the prefill worker and cause it to be killed by an out-of-memory condition.