Threats tagged 'ghsa-3cfg-rxhx-vc58'

1 threat

Threats tagged 'ghsa-3cfg-rxhx-vc58'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.6%	CVE-2026-103041LightLLM · Deserialization of Untrusted Data Critical9.3EPSS 0.6%2026-09-29CVE Database V5CVE-2026-103041 LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges. EPSS 0.6%Vulnerability ModelTC #ghsa-3cfg-rxhx-vc58	CVE Database V5	2026-09-29

Showing 1–1 of 1 result