CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-103041 — LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cac...

·Source: NIST NVD

Updated:

Executive Summary

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges.

Analysis

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges. CVSS Score: 9.8. Published: 2026-09-29T23:17:21.630.

Indicators of Compromise (1)

CVE (1)
CVE-2026-103041
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Sep 29, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Visa and Lloyds complete live trials of stablecoin settlement

Visa and Lloyds Banking Group have completed a live pilot exploring how stablecoin-based settlement could support faster, more transparent and flexible cross-border transactions.

Finextra
MEDIUMVulnerability

Zumo launches UK Crypto Regulation Tracker

UK digital asset firm Zumo has launcheed a Crypto Regulation Tracker to help firms cut through red tape and conquer the complexities associated with the incoming comprehensive regulatory regime.

Finextra
MEDIUMVulnerability

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries. The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek .

SecurityWeek