CRITICAL 9.3 NVD
CVE-2026-103395
LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in
LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in the remote_infer_images method. Attackers can reach the visual RPyC port and pass objects with __reduce__ methods to execute arbitrary code with service account privileges.
References
- https://github.com/ModelTC/LightLLM
- https://github.com/ModelTC/LightLLM/issues/1610
- https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/visualserver/objs.py#L6-L1
- https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/visualserver/visual_only_m
- https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-remote-code-ex
This critical severity vulnerability with a CVSS score of 9.3 was published on 2026-09-30 via NVD.
Risk Timeline
CVE Disclosed2026-09-30 · -1 days ago
Remediation Resources
vulnfeed aggregates 9504 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.