A vulnerability labeled as critical has been found in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function
lazyllm_call
of the file lazyllm/components/deploy/relay/server.py. Such manipulation leads to deserialization.
This vulnerability is uniquely identified as CVE-2025-10965. The attack can be launched remotely. Moreover, an exploit is present.