CVE-2026-103041

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1

Description Multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. This allows attackers to send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges. Pickle deserialization is a process where a Python object is converted from a byte stream back into an object, which can be exploited if the input is untrusted.

Recommendations Update LightLLM to version 1.2.1 or later.