Summary
generated automatically from NVD dataLightLLM versions through 1.2.0 expose an unauthenticated /visual_register WebSocket endpoint on the Config Server, which hands the first frame it receives straight to pickle.loads(). A remote attacker who can reach the Config Server port can send a crafted serialized payload using a __reduce__ method, causing arbitrary code execution with the privileges of the Config Server process. The flaw is an insecure deserialization issue (CWE-502) rated CVSS 9.8 (CRITICAL).
NVD description
LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.
EPSS · FIRST.org
1.1%probability of exploitation in the next 30 days
Higher than 64% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-19, recomputed daily by FIRST.org.
In-depth analysis on cveo.tech
We've published a detailed analysis of this CVE — exploitation, IOCs and mitigation.
CVSS v3.1 Score
Information
- Published
- 14 sept. 2026
- Updated
- 23 sept. 2026
- Status
- Deferred
- Source
- disclosure@vulncheck.com
Weaknesses (CWE)
References (5)
Similar CVEs
Other vulnerabilities of type CWE-502
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.