CVE-2026-90919: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization
LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visualregister WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a reduce method to execute arbitrary code with Config Server process privileges.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
LightLLM deployments through version 1.2.0 are exposed if an attacker can reach the Config Server port and its unauthenticated /visual_register WebSocket endpoint.
What does an attacker need to exploit the vulnerability?
The attacker needs network access to the Config Server port and the ability to send a malicious serialized payload as the first WebSocket frame to /visual_register. No authentication or user interaction is required.
What level of access can successful exploitation provide?
A successful attacker can execute arbitrary code with the privileges of the Config Server process. This can affect confidentiality, integrity, and availability.
What can be done while a patch is unavailable?
Restrict network access to the Config Server port so untrusted attackers cannot reach the /visual_register WebSocket endpoint.