CVE-2026-96560

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1

Description Remote code execution is possible in the KV-transfer worker when the service is started with the --pd trans mode nccl configuration. This configuration exposes an unauthenticated RPyC control channel via an RPyC ThreadedServer that deserializes attacker-supplied data. An attacker can send malicious pickled objects—serialized Python objects—to this channel to execute arbitrary code with the privileges of the LightLLM service account.

Recommendations Update LightLLM to a version later than 1.2.0. Avoid starting the KV-transfer worker with the --pd trans mode nccl parameter.