PT-2026-95638

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description An authentication bypass exists in the /pd register WebSocket endpoint. Unauthenticated attackers can register arbitrary nodes by providing crafted JSON, as the system fails to perform peer address...