Skip to content
Threat Feed
Subscribe

Tag

Lightllm

1 brief RSS
critical advisory

Remote Code Execution in LightLLM Config Server via Insecure Deserialization

LightLLM versions 1.2.0 and earlier are vulnerable to unauthenticated remote code execution via the Config Server's /visual_register WebSocket endpoint due to insecure pickle deserialization.

LightLLM vulnerability rce deserialization python denial-of-service remote-exploit
5t 1c updated