---
id: CVE-2026-103041
title: >-
  LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC
  cache service with pickle deserialization enabled on all interfaces
summary: >-
  LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC
  cache service with pickle deserialization enabled on all interfaces. Attackers
  can send crafted serialized objects to exposed cache methods to execute
  arbitrary…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-502
vendor: ModelTC
product: LightLLM
affected:
  - LightLLM <= 1.2.0
published: '2026-09-29'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T14:17:26.160'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-103041'
references:
  - url: 'https://github.com/ModelTC/LightLLM'
    label: disclosure@vulncheck.com
  - url: 'https://github.com/ModelTC/LightLLM/issues/1596'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L29-L31
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/embed_cache/manager.py#L66
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-remote-code-execution-via-embed-cache-rpyc-service
    label: disclosure@vulncheck.com
  - url: 'https://github.com/ModelTC/LightLLM/issues/1596'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-30T13:51:42.465326Z'
epss: 0.00774
epssPercentile: 0.55533
ingestedAt: '2026-09-29T23:52:50.535Z'
---

## Overview

LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to exposed cache methods to execute arbitrary code with service privileges.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.