LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle ...

Back Vulncheck

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle ...

Vulncheck • September 14, 2026

Share: View original

LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization

CWE-502 Deserialization of Untrusted Data

visual_websocket_endpoint pickle.loads sink at v1.2.0

Ready to get Started?

Vulnerability Prioritization Prioritize vulnerabilities that matter based on the threat landscape and defer vulnerabilities that don't.

Early Warning System Real-time alerting of changes in the vulnerability landscape so that you can take action before the attacks start.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Unauthenticated RCE Vulnerability in LightLLM Config Server LightLLM Config Server versions up to 1.2.0 are vulnerable to an unauthenticated remote code execution (RCE) flaw due to unsafe deserialization in the /visual_register WebSocket endpoint. The vulnerability, identified as CWE-502, allows attackers to exploit the endpoint by sending crafted pickle payloads without any authentication checks. This can lead to arbitrary code execution with the privileges of the Config Server process. The vulnerability was confirmed through testing, demonstrating that both unauthenticated and invalid-credential cases resulted in code execution. The affected code directly deserializes input from clients, exposing the service to potential exploitation if network-reachable. The issue has been documented in GitHub Issue #1563 and is linked to CVE-2026-26220, published on February 17, 2026. Security professionals are advised to assess their deployments and apply necessary mitigations. 1 sources 68

Extracted Entities

CWE Weaknesses (1)

CWE-502 - Deserialization Of Untrusted Data