World Wires · story 8339 · official · 1 source(s)

Critical router profiler vulnerability in LightLLM (CVE-2026-103040)

LightLLM through 1.2.0 contains an unauthenticated RPyC server vulnerability allowing remote code execution through the router profiler service.

Coverage

Critical RPyC cache vulnerability in LightLLM (CVE-2026-103041) NVD: critical CVEs · tier A · clear net · 2026-09-29 23:17 UTC
Critical router profiler vulnerability in LightLLM (CVE-2026-103040) NVD: critical CVEs · tier A · clear net · 2026-09-29 23:17 UTC