ModelTC LightLLM vulnerabilities
11 published CVEs name ModelTC LightLLM among the affected products.
- Published CVEs
- 11
- Last 12 months
- 11
- Critical
- 7
- Known exploited
- 0
Critical 7High 3Medium 1Low 0Not scored 0
Newest CVEs
- CVE-2026-111160
LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization
ModelTC · LightLLM
High8.7 - CVE-2026-103395
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service
ModelTC · LightLLM
Critical9.3 - CVE-2026-103270
LightLLM through 1.2.0 Missing Authentication on RL Control Routes
ModelTC · LightLLM
High8.7 - CVE-2026-103243
LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints
ModelTC · LightLLM
Medium6.9 - CVE-2026-103042
LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value
ModelTC · LightLLM
High8.7 - CVE-2026-103041
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service
ModelTC · LightLLM
Critical9.3 - CVE-2026-103040
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service
ModelTC · LightLLM
Critical9.3 - CVE-2026-96560
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
ModelTC · LightLLM
Critical9.3 - CVE-2026-93839
LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint
ModelTC · LightLLM
Critical9.3 - CVE-2026-90919
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization
ModelTC · LightLLM
Critical9.3