Lightllm
Monthly
Unauthenticated remote code execution affects ModelTC's LightLLM LLM inference framework in all versions through 1.2.0, where the Config Server's /visual_register WebSocket endpoint deserializes the first client frame with pickle.loads() without any authentication. An attacker who can reach the Config Server port can send a crafted pickle payload whose __reduce__ method runs arbitrary commands with the privileges of the Config Server process. Reported by VulnCheck; a proof-of-concept exists (SSVC exploitation=poc) though the flaw is not listed in CISA KEV.
Unauthenticated remote code execution affects ModelTC's LightLLM LLM inference framework in all versions through 1.2.0, where the Config Server's /visual_register WebSocket endpoint deserializes the first client frame with pickle.loads() without any authentication. An attacker who can reach the Config Server port can send a crafted pickle payload whose __reduce__ method runs arbitrary commands with the privileges of the Config Server process. Reported by VulnCheck; a proof-of-concept exists (SSVC exploitation=poc) though the flaw is not listed in CISA KEV.