{"items":[{"id":"CVE-2026-111160","published":"2026-10-15T18:57:48.390Z","updated":"2026-10-21T01:24:32.515Z","title":"LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization","severity":"HIGH","score":8.7,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00418,"kevAdded":null},{"id":"CVE-2026-108943","published":"2026-10-13T00:15:19.805Z","updated":"2026-10-15T14:50:26.552Z","title":"ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection","severity":"MEDIUM","score":4.8,"vendor":"ModelTC","product":"LightX2V","kev":false,"epss":0.00188,"kevAdded":null},{"id":"CVE-2026-103395","published":"2026-09-30T14:48:55.734Z","updated":"2026-09-30T19:38:06.768Z","title":"LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00616,"kevAdded":null},{"id":"CVE-2026-103270","published":"2026-09-30T14:48:55.071Z","updated":"2026-09-30T16:00:02.085Z","title":"LightLLM through 1.2.0 Missing Authentication on RL Control Routes","severity":"HIGH","score":8.7,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00513,"kevAdded":null},{"id":"CVE-2026-103243","published":"2026-09-30T14:48:54.414Z","updated":"2026-10-02T16:17:56.167Z","title":"LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints","severity":"MEDIUM","score":6.9,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.0031,"kevAdded":null},{"id":"CVE-2026-103042","published":"2026-09-29T22:51:01.631Z","updated":"2026-10-02T12:32:08.509Z","title":"LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value","severity":"HIGH","score":8.7,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00646,"kevAdded":null},{"id":"CVE-2026-103041","published":"2026-09-29T22:51:00.960Z","updated":"2026-09-30T13:51:49.613Z","title":"LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00774,"kevAdded":null},{"id":"CVE-2026-103040","published":"2026-09-29T22:51:00.313Z","updated":"2026-09-30T13:59:15.479Z","title":"LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.01014,"kevAdded":null},{"id":"CVE-2026-96560","published":"2026-09-23T13:32:38.336Z","updated":"2026-09-24T14:23:23.635Z","title":"LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.01193,"kevAdded":null},{"id":"CVE-2026-93839","published":"2026-09-18T19:06:05.152Z","updated":"2026-09-24T14:23:14.036Z","title":"LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00761,"kevAdded":null},{"id":"CVE-2026-90919","published":"2026-09-14T11:30:59.783Z","updated":"2026-09-14T14:24:32.920Z","title":"LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.01086,"kevAdded":null},{"id":"CVE-2026-26220","published":"2026-02-17T01:52:03.650Z","updated":"2026-07-14T15:54:03.881Z","title":"LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE","severity":"CRITICAL","score":9.3,"vendor":"ModelTC","product":"LightLLM","kev":false,"epss":0.00962,"kevAdded":null}]}