CyberRota Analysis
AI-GeneratedLightLLM versions up to 1.2.0 are vulnerable to a critical remote code execution flaw in the Config Server's unauthenticated /visual_register WebSocket endpoint, allowing attackers to send malicious serialized payloads that can execute arbitrary code. This vulnerability poses a significant risk as it enables unauthorized access to the Config Server process with elevated privileges. Organizations using LightLLM should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LightLLM through 1.2.0 contains a remote code execution vulnerability in the Config Server's unauthenticated /visual_register WebSocket endpoint that passes the first client frame directly to pickle.loads(). Attackers can reach the Config Server port and send a malicious serialized payload with a __reduce__ method to execute arbitrary code with Config Server process privileges.