{"id":"CVE-2026-90919","title":"LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads()","summary":"LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Confi…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-502"],"vendor":"ModelTC","product":"LightLLM","affected":["LightLLM <= 1.2.0"],"published":"2026-09-14","updated":"2026-09-14","sourceUpdated":"2026-09-14T15:17:13.630","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-90919","references":[{"url":"https://github.com/ModelTC/LightLLM/blob/v1.2.0/lightllm/server/config_server/api_http.py#L79-L86","label":"disclosure@vulncheck.com"},{"url":"https://github.com/ModelTC/LightLLM/issues/1563","label":"disclosure@vulncheck.com"},{"url":"https://github.com/ModelTC/lightllm","label":"disclosure@vulncheck.com"},{"url":"https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-remote-code-execution-via-config-server-pickle-deserialization","label":"disclosure@vulncheck.com"},{"url":"https://github.com/ModelTC/LightLLM/issues/1563","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"total","timestamp":"2026-09-14T14:24:06.459437Z"},"ingestedAt":"2026-09-14T15:23:07.421Z","epss":0.01014,"epssPercentile":0.61255,"slug":"CVE-2026-90919","body":"## Overview\n\nLightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":66,"depthScoreParts":{"impact":53.9,"likelihood":0.2,"exploitation":12,"ransomware":0},"changes":[]}