agentprime: modeltc-lightllmEvery new CVE for modeltc-lightllm.https://agentprime.io/CVE-2026-111160: LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserializationhttps://agentprime.io/advisories/CVE-2026-111160/https://agentprime.io/advisories/CVE-2026-111160/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 15 Oct 2026 18:57:48 GMTCVECVE-2026-103395: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Servicehttps://agentprime.io/advisories/CVE-2026-103395/https://agentprime.io/advisories/CVE-2026-103395/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 14:48:55 GMTCVEcriticalCVE-2026-103270: LightLLM through 1.2.0 Missing Authentication on RL Control Routeshttps://agentprime.io/advisories/CVE-2026-103270/https://agentprime.io/advisories/CVE-2026-103270/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 14:48:55 GMTCVECVE-2026-103243: LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpointshttps://agentprime.io/advisories/CVE-2026-103243/https://agentprime.io/advisories/CVE-2026-103243/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 14:48:54 GMTCVECVE-2026-103042: LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_valuehttps://agentprime.io/advisories/CVE-2026-103042/https://agentprime.io/advisories/CVE-2026-103042/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 22:51:01 GMTCVECVE-2026-103041: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Servicehttps://agentprime.io/advisories/CVE-2026-103041/https://agentprime.io/advisories/CVE-2026-103041/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 22:51:00 GMTCVEcriticalCVE-2026-103040: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Servicehttps://agentprime.io/advisories/CVE-2026-103040/https://agentprime.io/advisories/CVE-2026-103040/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 22:51:00 GMTCVEcriticalCVE-2026-96560: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channelhttps://agentprime.io/advisories/CVE-2026-96560/https://agentprime.io/advisories/CVE-2026-96560/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:32:38 GMTCVEcriticalCVE-2026-93839: LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpointhttps://agentprime.io/advisories/CVE-2026-93839/https://agentprime.io/advisories/CVE-2026-93839/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:06:05 GMTCVEcriticalCVE-2026-90919: LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserializationhttps://agentprime.io/advisories/CVE-2026-90919/https://agentprime.io/advisories/CVE-2026-90919/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 11:30:59 GMTCVEcriticalCVE-2026-26220: LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCEhttps://agentprime.io/advisories/CVE-2026-26220/https://agentprime.io/advisories/CVE-2026-26220/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Feb 2026 01:52:03 GMTCVEcritical