CVE ID :CVE-2026-103041 Published : Sept. 29, 2026, 11:17 p.m. | 58 minutes ago Description :LightLLM through 1.2.0 multimodal deployments expose an unauthenticated RPyC cache service with pickle deserialization enabled on all interfaces. Attackers can send crafted serialized objects to...

#Sicherheitslücke #AI

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103041 - LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service

VERWANDTEARTIKEL

CVE-2025-14564

CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

CVE-2026-101283 - iperf3 Heap Buffer Overflow

CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability

CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams