https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T14:58:38.259788+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-103243 CVE-2026-103243 — LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints 2026-10-01T14:58:38.261301+00:00

Affected: ModelTC LightLLM

LightLLM through 1.2.0 fails to validate image_url and audio_url parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model processing disclosing content or error responses revealing internal network topology.