EUVD-2026-77429
GHSA-6qph-w2vp-jm84
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Unauthenticated network-reachable pickle deserialization giving arbitrary code execution justifies AV:N/AC:L/PR:N/UI:N and full C:H/I:H/A:H; scope unchanged as code runs within the process host.
Primary rating from Vendor (VulnCheck).
CVSS VectorVendor: VulnCheck
Lifecycle Timeline
2DescriptionCVE.org
LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.
AnalysisAI
Unauthenticated remote code execution affects ModelTC's LightLLM LLM inference framework in all versions through 1.2.0, where the Config Server's /visual_register WebSocket endpoint deserializes the first client frame with pickle.loads() without any authentication. An attacker who can reach the Config Server port can send a crafted pickle payload whose __reduce__ method runs arbitrary commands with the privileges of the Config Server process. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The attacker must have network reachability to the LightLLM Config Server's WebSocket port and the /visual_register endpoint must be exposed (its default state in versions through 1.2.0); no authentication, credentials, or user interaction are required, since the endpoint is unauthenticated and passes the first frame directly to pickle.loads(). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuine high-priority issue, not an inflated score. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patched version was identified in the available data, so treat mitigation as primary. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Immediately restrict Config Server port access to authenticated internal networks only using firewall rules; verify your LightLLM version against 1.2.0 and earlier to confirm exposure. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-502 – Deserialization of Untrusted Data
View allShare
External POC / Exploit Code
Leaving vuln.today