CVE-2026-103041

9.8 CRITICALpublic exploit available

Published 2026-09-29 · Updated 2026-09-29

AI risk analysis

Summary: LightLLM through 1.2.0 allows unauthenticated attackers to execute arbitrary code via RPyC cache service with pickle deserialization enabled.
Exploitability: Exploitation is relatively straightforward given the unauthenticated nature and the exposed service on all interfaces.
Blast radius: If exploited, this flaw could lead to full compromise of the affected system and potentially lateral movement within a network.
Detection: No reliable host or network indicator is derivable from the published description.
Prioritized remediation: Disable the RPyC cache service or restrict access to it to only authorized interfaces and users.

rcepickle-deserializationunauthenticatedservice-exploit

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Public exploit & PoC references

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.