CVE ID :CVE-2026-103270 Published : 30. September 2026 15:22 | 1 Stunde, 16 Minuten ago Description :LightLLM through 1.2.0 mounts reinforcement learning control routes on the public HTTP API without authentication checks. Unauthenticated attackers can call endpoints like /pause_generation,...

#Sicherheitslücke #AI

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-103270 - LightLLM through 1.2.0 Missing Authentication on RL Control Routes

VERWANDTEARTIKEL

CVE-2026-103591 - DeepWiki-Open through commit d92819a Unauthenticated Arbitrary File Read via /codemap/file

CVE-2026-101283 - iperf3 Heap Buffer Overflow

CVE-2026-51570 - ModelScope AgentScope Path Traversal Vulnerability

CVE-2026-102997 - pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)

CVE-2026-102998 - pypdf: Possible long runtimes when generating appearance streams

CVE-2026-102999 - pypdf: Possible long runtimes with large amount of embedded files