CVE-2026-111160: LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization
LightLLM through 1.2.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the inference worker by supplying the internal pdkvtransparams field to the /generate endpoint. Attackers can send a single request whose parameters cause pickle.loads to fail in InferSamplingParams, killing the inference thread while /health stays up and all later requests hang until restart.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
LightLLM deployments through version 1.2.0 are exposed if unauthenticated users can reach the /generate endpoint. The affected field is accepted through that endpoint, so no account or prior access is required.
What does an attacker need to do to trigger the denial of service?
An attacker only needs to send one request to /generate containing the internal pd_kv_trans_params field with parameters that cause pickle.loads to fail in InferSamplingParams. The stated attack vector is network-accessible, low complexity, requires no privileges, and needs no user interaction.
How can operators recognize that exploitation may have occurred?
The inference worker thread is killed, while the /health endpoint continues to report as available. Subsequent inference requests hang until the service is restarted, so a healthy health check combined with stalled generation requests is an indicator.
What can be done if an update is not immediately available?
Restrict access to the /generate endpoint to trusted callers so unauthenticated attackers cannot submit pd_kv_trans_params. If the worker has already been crashed, restart the affected service to restore processing.