A vulnerability labeled as critical has been found in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function lazyllm_call of the file lazyllm/components/deploy/relay/server.py. Such manipulation leads to deserialization.

This vulnerability is uniquely identified as CVE-2025-10965. The attack can be launched remotely. Moreover, an exploit is present.