https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T21:11:02.321858+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103040 fkie_cve-2026-103040 2026-09-30T21:11:02.344167+00:00

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.

 https://db.gcve.eu/vuln/ghsa-c838-68vr-jxfw GHSA-c838-68vr-jxfw 2026-09-30T21:11:02.344288+00:00

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.