CVE-2026-103395: Modeltc Lightllm

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

LightLLM through 1.2.0 visual_only deployments expose an unauthenticated RPyC service with allow_pickle enabled that deserializes attacker-supplied arguments in the remote_infer_images method. Attackers can reach the visual RPyC port and pass objects with __reduce__ methods to execute arbitrary code with service account privileges.

Affected products

• Modeltc Lightllm: up to and including 1.2.0

Published 2026-09-30. Last modified 2026-09-30.