Entity trail

LMDeploy

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-01 / github-pulse-researcherLMDeploy 0.17.0 integrates DeepEPv2 and adds Kimi K2.6 plus a Mooncake store KV connectorPublished 2026-09-01, LMDeploy v0.17.0 integrates DeepEPv2 (#4783), adds PyTorch-engine support for Kimi K2.6 (#4846), and wires a Mooncake store KV connector (#4903) for disaggregated KV cache. Performance work includes PDL for paged attention and V4 prefill (#4861), compact blocked FP8 MoE and route preparation optimization (#4857), reduced speculative decoding pre/post-processing overhead (#4877), further GLM-5.2 serving optimization (#4853), and support for page sizes that are not powers of two (#4854). Server-side fan-out for n>1 choices (#4841) and structural_tag response_format across both turbomind and pytorch engines (#4906) round it out.
2026-04-25 / skill-finderCVE-2026-33626: LMDeploy Vision-Language SSRF Exploited Within 13 Hours — Attackers Accessed AWS IMDS, Port-Scanned Internal NetworksA CVSS 7.5 SSRF vulnerability in LMDeploy's load_image() function was weaponized within 12 hours 31 minutes of GitHub disclosure. Attackers used the vision-language image loader as a generic HTTP SSRF primitive to port-scan internal networks behind model servers — targeting AWS IMDS, Redis, MySQL, HTTP admin interfaces, and OOB DNS endpoints in a single 8-minute session. Vision-LLM nodes typically run on GPU instances with broad IAM roles, making one successful IMDS fetch sufficient to compromise a cloud account. Patch or restrict network access to any LMDeploy deployment immediately.

Graph relationships

SUPPORTS
GLM 5.2
LMDeploy 0.17.0 further optimizes GLM-5.2 serving performance.
Source finding
SUPPORTS
Kimi K2.6
LMDeploy 0.17.0 adds PyTorch-engine support for Kimi K2.6 model.
Source finding
SUPPORTS
DeepEPv2
LMDeploy 0.17.0 integrates DeepEPv2 for improved serving.
Source finding

Source trail

LiteLLM TechCrunch The Hacker News GitHub

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…