CVE-2026-103040

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-103040

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103040.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-103040

Published

2026-09-29T22:51:00Z

Modified

2026-10-02T03:30:40Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service

Details

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.

Database specific

{
    "cna_assigner":  "VulnCheck",
    "cwe_ids":  [
        "CWE-502"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/103xxx/CVE-2026-103040.json"
}

References

Affected packages

Git / github.com/modeltc/lightllm

Affected ranges

Type

GIT

Repo

https://github.com/modeltc/lightllm

Events

Introduced

Fixed

65c174ee95ac6a6fd36b18b63d0b33d97e76b770

Database specific

Show details

{
    "extracted_events":  [
        {
            "introduced":  "0"
        },
        {
            "last_affected":  "1.2.0"
        },
        {
            "fixed":  "1.2.0"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "DESCRIPTION"
    ]
}

Affected versions

v1.*

v1.0.0

v1.0.1

v1.1.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-103040.json"