Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:lightllm:lightllm:*:*:*:*:*:*:*:*

2 briefs RSS
low advisory

Denial of Service Vulnerability in LightLLM

LightLLM versions through 1.2.0 are susceptible to an unauthenticated denial-of-service attack via the /generate endpoint caused by unsafe deserialization.

LightLLM denial-of-service vulnerability web-application
1t 1c
critical advisory

Remote Code Execution in LightLLM Config Server via Insecure Deserialization

LightLLM versions 1.2.0 and earlier are vulnerable to unauthenticated remote code execution via the Config Server's /visual_register WebSocket endpoint due to insecure pickle deserialization.

LightLLM vulnerability rce deserialization python denial-of-service remote-exploit
5t 1c updated