PT-2026-8395 · Lightllm · Lightllm
CVSS v4.0
9.3
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
LightLLM versions prior to 1.1.1
Description
An unauthenticated remote code execution issue exists in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to the
pickle.loads() function without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution. Deserialization is the process of converting a data format back into an object, and in this case, the use of pickle.loads() allows for the execution of malicious code during this process.Recommendations
Update LightLLM to a version newer than 1.1.0.
As a temporary workaround, restrict access to the PD master node WebSocket endpoints to minimize the risk of exploitation.
Exploit
Fix
RCE
Deserialization of Untrusted Data
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Lightllm