CVE-2026-26220
CriticalCVSS 9.3Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to pickle.loads() without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution.
Risk Assessment
The risk for the organization includes full compromise of the LightLLM server, potentially leading to data theft, service disruption, or use of the server for further attacks within the internal network.
Recommendation
It is recommended to immediately upgrade LightLLM to a version newer than 1.1.0 if available, or temporarily disable PD mode and restrict access to WebSocket ports using a firewall.
Original NVD description (English source)
LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to pickle.loads() without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution.