CyberRota Analysis
AI-GeneratedLightLLM versions up to 1.2.0 are vulnerable to a remote code execution flaw in the KV-transfer worker when configured with the --pd_trans_mode nccl option, which inadvertently exposes an unauthenticated RPyC control channel. This vulnerability allows attackers to send malicious pickled objects, enabling them to execute arbitrary code with the privileges of the LightLLM service account. Organizations using LightLLM should prioritize patching this critical vulnerability to mitigate the risk of unauthorized access and potential system compromise.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC ThreadedServer to execute arbitrary code with the privileges of the LightLLM service account.