CVE-2026-90919

CriticalCVSS 9.8

Published: 14/09/2026(UTC)Updated: 14/09/2026(UTC)Translated: 17/09/2026(UTC)NVD NIST

Summary

LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint, which passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.

Risk Assessment

An attacker with network access to the Config Server port can remotely execute arbitrary code with that process's privileges, leading to full system compromise. The risk is critical because the endpoint requires no authentication.

Recommendation

Upgrade LightLLM to a version newer than 1.2.0 once available. Until then, restrict network access to the Config Server port and disable the /visual_register endpoint.

Other vulnerabilities in LightLLM

CVE-2026-26220Critical
LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to pickle.loads() without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution.

Original NVD description (English source)

LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.