PT-2026-103289

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description In visual only deployments, an unauthenticated RPyC service is exposed with allow pickle enabled. This configuration allows the remote infer images function to deserialize attacker-supplied argument...