PT-2026-8395 · Lightllm · Lightllm

Valentin Lobstein · Published 2026-02-17 · Updated 2026-02-23 · CVE-2026-26220

Positive Technologies (AI Summary)

CVSS v4.0

9.3

Critical

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.0

Description LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution issue in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to the pickle.loads() function without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution. The pickle.loads() function deserializes data, and in this case, it does so without proper security checks, allowing for potentially malicious code to be executed.

Recommendations Versions prior to 1.2.0 should be updated.

Exploit

Fix

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-26220

Affected Products

Lightllm

References · 16

• 🔥 https://chocapikk.com/posts/2026/lightllm-pickle-rce · Exploit
• https://github.com/ModelTC/LightLLM/issues/1213 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-26220 · Security Note
• https://osv.dev/vulnerability/CVE-2026-26220 · Vendor Advisory
• https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L331 · Note
• https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L310 · Note
• https://twitter.com/CVEnew/status/2023608864541679840 · Twitter Post
• https://t.me/CVEtracker/44857 · Telegram Post
• https://lightllm-en.readthedocs.io/en/latest/index.html · Note
• https://twitter.com/CVEarity/status/2023648551595855914 · Twitter Post
• https://vulncheck.com/advisories/lightllm-pd-mode-unsafe-deserialization-rce · Note
• https://twitter.com/0dayPublishing/status/2023588180801339407 · Twitter Post
• https://twitter.com/SecAideInfo/status/2024433083190235624 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2023600784307372288 · Twitter Post
• https://t.me/cveNotify/152140 · Telegram Post