{"id":"CVE-2026-103041","published":"2026-09-29T23:17:21.630","lastModified":"2026-09-29T23:17:21.760","description":"LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-502"],"vendors":[],"products":[],"references":[{"url":"https://github.com/ModelTC/LightLLM","tags":[]},{"url":"https://github.com/ModelTC/LightLLM/issues/1596","tags":[]},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L29-L31","tags":[]},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L66","tags":[]},{"url":"https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-remote-code-execution-via-embed-cache-rpyc-service","tags":[]}],"exploitRefs":[{"url":"https://github.com/ModelTC/LightLLM","tags":[]},{"url":"https://github.com/ModelTC/LightLLM/issues/1596","tags":[]},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L29-L31","tags":[]},{"url":"https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L66","tags":[]}],"hasPoc":true,"ai":{"summary":"LightLLM through 1.2.0 allows unauthenticated attackers to execute arbitrary code via RPyC cache service with pickle deserialization enabled.","exploitability":"Exploitation is relatively straightforward given the unauthenticated nature and the exposed service on all interfaces.","blast_radius":"If exploited, this flaw could lead to full compromise of the affected system and potentially lateral movement within a network.","remediation":"Disable the RPyC cache service or restrict access to it to only authorized interfaces and users.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","pickle-deserialization","unauthenticated","service-exploit"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-09-30T08:48:42.793Z"}}