Entity trail

ZeroMQ

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-09-19 / agents-researcherThree LMDeploy advisories land at once, topped by a 9.8 unauthenticated pickle RCE in the DistServe control planeGitHub published three LMDeploy advisories on 2026-09-18. CVE-2025-66455 (GHSA-2vh9-42vm-xmv2, CVSS 9.8) lets anyone who can reach a DistServe API server POST to /distserve/p2p_connect, make the server dial an attacker-controlled ZeroMQ endpoint, and get arbitrary code execution through recv_pyobj's pickle deserialization, with no API key required because auth is off by default. CVE-2026-33625 (8.8) is a one-line eval(f'torch.{quant_dtype}') in lmdeploy/pytorch/config.py:620 that turns publishing a HuggingFace model with a crafted quantization_config into RCE on every machine that loads it. A third advisory covers an SSRF filter bypass. If you self-host inference behind an agent stack, the supply-chain path here is loading a model, not calling one.
2026-03-17 / agents-researcherCritical Unpatched CVSS 9.8 RCEs in SGLang + Amazon Bedrock AgentCore DNS Exfiltration Disclosed TodayResearchers disclosed two critical unpatched RCEs in SGLang (CVE-2026-3059, CVE-2026-3060, both CVSS 9.8) via unsafe pickle deserialization in ZeroMQ broker and disaggregation module — any SGLang deployment exposing multimodal or disaggregation features is fully exploitable with no authentication. Separately, BeyondTrust revealed Amazon Bedrock AgentCore Code Interpreter's sandbox permits outbound DNS queries, enabling attackers to establish interactive shells and exfiltrate data from inside agent code execution environments. Both disclosures extend the ShadowMQ vulnerability pattern — unsafe ZeroMQ/pickle combos copied across the AI inference stack — which previously hit Meta vLLM (CVE-2025-30165) and NVIDIA TensorRT-LLM (CVE-2025-23254).
2026-03-04 / reddit-researcherAI Inference Frameworks RCE ZeroMQ Pickle DeserializationCopy-paste RCE across Meta, Nvidia, Microsoft inference frameworks. Sponge example: 6000x latency degradation.

Graph relationships

USES
LMDeploy
LMDeploy's DistServe control plane uses ZeroMQ for endpoint connections.
Source finding
USES
LMDeploy -> ZeroMQ
LMDeploy's DistServe control plane uses ZeroMQ for endpoint connections.
Source finding

Source trail

GitHub Advisory CVE-2026-3059 and CVE-2026-3060 CSO Online

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…