Skip to content

CVE-2026-26220

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 14, 2026
Last Seen
September 14, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Unauthenticated RCE Vulnerability in LightLLM Config Server67.5

LightLLM Config Server versions up to 1.2.0 are vulnerable to an unauthenticated remote code execution (RCE) flaw due to unsafe deserialization in the /visual_register WebSocket endpoint. The vulnerability, identified as CWE-502, allows attackers to exploit the endpoint by sending crafted pickle pay...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Cwe-502 - Deserialization Of Untrusted DataT1059 - Command and Scripting Interpreter