Skip to content
Threat Feed
Subscribe

Product

LightLLM (<= 1.2.0)

1 brief RSS
critical advisory

Remote Code Execution in LightLLM Config Server via Insecure Deserialization

LightLLM versions 1.2.0 and earlier are vulnerable to unauthenticated remote code execution via the Config Server's /visual_register WebSocket endpoint due to insecure pickle deserialization.

LightLLM
3t 1c updated