CVE-2026-103040: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service
LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enableprofiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
LightLLM deployments through version 1.2.0 are exposed when the router profiler service is started with the --enable_profiling flag. The vulnerable service is an unauthenticated RPyC server.
What does an attacker need to exploit the vulnerability?
An attacker needs network access to the profiler RPyC service. No authentication, privileges, or user interaction are required; exploitation involves sending crafted serialized objects to the profiler command queue.
Is profiling enabled by default?
The provided information only identifies deployments started with --enable_profiling as affected. It does not state whether that flag is enabled by default.
What can be done if patching is not immediately possible?
Do not start the router profiler service with --enable_profiling. If it must remain enabled, restrict network access to the profiler RPyC service so untrusted hosts cannot reach it.