zmqrpc localhost only (#4017)

* zmqrpc localhost only

* add warning comment

Author: grimoire

lmdeploy/pytorch/engine/mp_engine/zmq_rpc.py

@@ -32,7 +32,9 @@ def _task_callback(task: asyncio.Task) -> None:
 class AsyncRPCServer:
 
     def __init__(self):
-        address = 'tcp://*'
+        # Warning: DO NOT allow visit rpc server from external network
+        # unauthorized access may lead to code execution vulnerability
+        address = 'tcp://localhost'
         self.context = zmq.Context()
         self.socket = self.context.socket(zmq.ROUTER)
         self.port = self.socket.bind_to_random_port(address)