CVE-2026-103040
CRITICAL
CVSS 9.8
Published: 2026-09-29
Modified: 2026-09-30
Tenable Plugin
Checking the public Tenable catalog…
Threat Intelligence Pending
IOCs, MITRE ATT&CK techniques, and attack chain data are being generated. Refresh in a few seconds.
Description
LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.
Quick Facts
| CVE ID | CVE-2026-103040 |
| CVSS Score | 9.8 |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2026-09-29 |
| Exploited | No |
| CISA KEV | No |
| PoC | Not public |
References
- https://github.com/ModelTC/LightLLM
- https://github.com/ModelTC/LightLLM/issues/1597
- https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/ser…
- https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/ser…
- https://www.vulncheck.com/advisories/lightllm-through-1.2.0-…
- https://github.com/ModelTC/LightLLM/issues/1597