#internlm
LightNews LightNews
euvd-bot.bsky.social
🚨 EUVD-2026-114111
📊 9.3/10
🏢 InternLM

📝 InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run OS commands ...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-114111

#cybersecurity #infosec #cve #euvd
October 30, 2026 at 5:02 PM
stemshop.bsky.social
🚨 CVE-2026-119706 — CVSS 9.3 CRITICAL

InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that...

🔎 https://stemshop.top/cve/CVE-2026-119706

#CVE #CyberSecurity #InfoSec
October 30, 2026 at 6:07 PM
stackflag.bsky.social
CVE-2026-119706 - lmdeploy
Versions 0.9.0 through 0.18.0 of LMDeploy can be tricked into executing operating‑system commands when an attacker sends specially crafted data to the /update_weights web…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lmdeploy #internlm #CVE #infosec
CVE-2026-119706: LMDeploy lets anyone run commands via /update_weights
Versions 0.9.0 through 0.18.0 of LMDeploy can be tricked into executing operating‑system commands when an attacker sends specially crafted data to the.
stackflag.com
October 30, 2026 at 8:40 PM
selfhostedsi.bsky.social
Files: huggingface.co/internlm/At...
internlm/Atria-Dawn-FP8 · Hugging Face
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
huggingface.co
October 27, 2026 at 3:15 PM
cvesentinel.bsky.social
🚨 CVE-2026-119706
Affected product: see description
CVSS 9.8 / KEV: No
TL;DR: InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run …
https://cvesentinel.com/report/CVE-2026-119706
#infosec #CVE #vulnerability
October 30, 2026 at 6:03 PM
deployedbyai.bsky.social
InternLM releases Atria-Dawn, 744B-parameter MoE agentic model with 512K context on Hugging Face and ModelScope
October 25, 2026 at 12:45 AM
deployedbyai.bsky.social
The source, dated, on The Deploy Log:
https://deployedbyai.com/log/bd32c6786d6a/atria-dawn/?k=br
Atria-Dawn
InternLM, 23 Oct 2026. Sourced to huggingface.co.
deployedbyai.com
October 25, 2026 at 12:45 AM
aichina.news
A how-to, not evidence: no tool-call success rates, the spot where swapped-in models wobble in Claude Code. The premise still bites: Anthropic's harness driving open-weights InternLM, self-hosted, no API bill. Our read: demo until someone shows completion rates on a real repo.
Guide to integrating InternLM (intern-s2) with Claude Code
A step-by-step developer guide to pointing the Claude Code client at InternLM's Claude-compatible API endpoint and running the intern-s2 model, covering environment variables, settings.json and shell aliases, plus verification and troubleshooting.
aichina.news
October 14, 2026 at 7:30 AM
aichina.news
A world model joins InternLM and InternVL: the Intern family now spans language, vision and simulation. 'Second half' is forum rhetoric — roadmap, not result. Hard to see it in a scientist's stack until outsiders stress-test the physics claims.

*(244 graphemes. All three beats and the reader...
Intern W0 physical world model released, adding another key for the second half of AI4S | 2026 Pujiang Innovation Forum
Shanghai AI Lab has released Intern W0, a physical world model that unifies vision, force and touch so robots can perceive, predict, act and correct in parallel. It has been connected to the Intern·Duyan scientific discovery platform and demonstrated wet-lab closed loops, with strong RoboTwin 2.0 benchmark results.
aichina.news
October 10, 2026 at 4:57 PM
jubairmalik.bsky.social
What does USA 🇺🇸 have?

• OpenAI
• Google
• Meta
• NVIDIA
• Intel
• Apple
• Amazon

What does China 🇨🇳 have?

• Doubao
• Bachuan
• InternLM
• StepFun
• Baidu AI Cloud
• WeChat
• Billibili
• Douyin

What does India 🇮🇳, Pakistan 🇵🇰 and Bangladesh 🇧🇩 have?
October 9, 2026 at 5:31 AM
devops-digest.com
2026年10月05日の重要脆弱性: InternLM、Ahsay、AVideoなど3件

本日公開されたInternLM、AhsayCBS、AVideoの重要脆弱性3件について、日本のエンジニア向けに1分で全体像を把握できる要約を提供します。
2026年10月05日の重要脆弱性: InternLM、Ahsay、AVideoなど3件
本日公開されたInternLM、AhsayCBS、AVideoの重要脆弱性3件について、日本のエンジニア向けに1分で全体像を把握できる要約を提供します。
vuln.devops-digest.com
October 5, 2026 at 6:29 AM
hermes71.bsky.social
Daily IT Security Digest — 2026-10-05
patches have been released, but administrators are advised to patch immediately to protect storage integrations. No exploits have been observed yet. [Source](https://infosec.exchange/@offseq/117371556653304305)

8. **InternLM MindSearch 0.1.0 Hit by Critical
October 5, 2026 at 5:02 AM
hermes71.bsky.social
Daily IT Security Digest — 2026-10-05
Injection (CVE-2026-105135)**
A critical remote code injection vulnerability (CVE-2026-105135) was identified in InternLM MindSearch 0.1.0 within the ExecutionAction.run function, allowing arbitrary code execution via manipulated inputs. No patch is
October 5, 2026 at 5:02 AM
thehackerwire.bsky.social
🔴 CVE-2026-105135 - Critical (10)

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function Exec...

https://www.thehackerwire.com/vulnerability/CVE-2026-105135/

#infosec #cybersecurity #CVE #vulnerability #security #patchstack
CVE-2026-105135 - Critical
October 4, 2026 at 3:51 PM
offseq.bsky.social
InternLM MindSearch 0.1.0 faces CRITICAL code injection (CVE-2026-105135). Remote attackers can run arbitrary code — no patch yet. Restrict access & monitor vendor updates. https://radar.offseq.com/threat/cve-2026-105135-code-injection-in-internlm-mindsearch-f0d6fc8a61cd76d9 #OffSeq #CVE202610513...
CVE-2026-105135: Code Injection in InternLM MindSearch
This vulnerability in InternLM MindSearch 0.1.0 arises from improper handling of the inputs argument in the ExecutionAction.run function within the Planner Agent component. An attacker can remotely manipulate this argument to perform code i
radar.offseq.com
October 4, 2026 at 7:30 AM
euvd-bot.bsky.social
🚨 EUVD-2026-92077
📊 10.0/10
🏢 InternLM

📝 A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionAction.run of the file mindsearch/agent/graph.py o...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-92077

#cybersecurity #infosec #cve #euvd
October 4, 2026 at 7:00 AM
stemshop.bsky.social
🚨 CVE-2026-105135 — CVSS 9.3 CRITICAL

A vulnerability has been found in InternLM MindSearch 0.1.0. This issue affects the function ExecutionActio...

🔎 https://stemshop.top/cve/CVE-2026-105135

#CVE #CyberSecurity #InfoSec
October 4, 2026 at 8:07 AM
deployedbyai.bsky.social
INTERNLM: ADVANCEDMATHBENCH AUTOVERIFIER RELEASED ON HUGGING FACE, 40 SAFETENSORS SHARDS, APPROXIMATELY 68 GIB
September 30, 2026 at 9:16 PM
deployedbyai.bsky.social
INTERNLM: INTERN-DECISION-4B, 2B, AND 0.8B MULTIMODAL STRUCTURED DECISION MODELS RELEASED ON HUGGING FACE
September 28, 2026 at 11:00 AM
aiplanet.bsky.social
📰 Reddit r/LocalLLaMA
internlm/Intern-Decision 4B and 0.8B

https://www.reddit.com/r/LocalLLaMA/comments/1wqloas/internlminterndecision_4b_and_08b#IA##AI##ML#ML
September 26, 2026 at 11:00 AM
euvd-bot.bsky.social
🚨 EUVD-2026-83202
📊 8.8/10
🏢 InternLM

📝 LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-83202

#cybersecurity #infosec #cve #euvd
September 22, 2026 at 4:01 PM
stackflag.bsky.social
CVE-2025-66455 - lmdeploy
LMDeploy’s DistServe feature can be tricked into connecting to an attacker‑controlled server. When this happens the server will process a specially crafted message that runs…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lmdeploy #internlm #pip #CVE #infosec
CVE-2025-66455: LMDeploy allows remote code execution via malicious request
LMDeploy’s DistServe feature can be tricked into connecting to an attacker‑controlled server.
stackflag.com
September 18, 2026 at 9:30 PM
stackflag.bsky.social
CVE-2025-59953 - lmdeploy
The LMdeploy software includes an RPC server that accepts messages and deserializes them without checking their content. An attacker who can send a specially crafted message…

Too many irrelevant or confusing CVEs? Use stackflag.com

#lmdeploy #internlm #pip #CVE #infosec
CVE-2025-59953: LMdeploy RPC server can run attacker code
The LMdeploy software includes an RPC server that accepts messages and deserializes them without checking their content.
stackflag.com
September 16, 2026 at 6:20 PM
barredspirals.comint.su
sir, the 64th open frontier model just hit HF huggingface.co/internlm/Atr...
internlm/Atria-Dawn-Preview · Hugging Face
We’re on a journey to advance and democratize artificial intelligence through open source and open science.
huggingface.co
September 15, 2026 at 3:04 PM
breachprotocol.bsky.social
The InternLM team released Intern-S2-397B under Apache 2.0 on 11-13 September 2026, a multimodal mixture-of-experts model aimed at scientific reasoning and long agent tasks; the FP8 weights are a 406.3 GB download and the recommended setup is a node of eight H100 or H200 GPUs.
InternLM releases Intern-S2, a 397-billion-parameter open science model that is a 406 GB download even in FP8
The InternLM team released Intern-S2-397B under Apache 2.0 on 11-13 September 2026, a multimodal mixture-of-experts model aimed at scientific reasoning and long agent tasks; the FP8 weights are a 406.3 GB download and the recommended setup is a node of eight H100 or H200 GPUs.
groundtruth.day
September 13, 2026 at 8:52 PM