CVE-2026-96560
Last modified
CVE-2026-96560 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC ThreadedServer to execute arbitrary code with the privileges of the LightLLM service account..
Description
LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC ThreadedServer to execute arbitrary code with the privileges of the LightLLM service account.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| ModelTC | LightLLM | <= 1.2.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-96560?
How severe is CVE-2026-96560?
How do I fix CVE-2026-96560?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-96512A flaw was found in sudo. When sudoers rules use NOTBEFORE o…7.8
- CVE-2026-96513A security flaw has been discovered in Neethuharii CafeManag…7.3
- CVE-2026-96514A weakness has been identified in Neethuharii CafeManagement…7.3
- CVE-2026-9653A denial-of-service security issue exists across all the 175…8.7
- CVE-2026-96559Rejected reason: This ID was for testing
- CVE-2026-9656The HubSpot All-In-One Marketing – Forms, Popups, Live Chat …4.3
- CVE-2026-9658Plack::Middleware::Security::Common versions before 0.13.1 f…7.3
- CVE-2026-96599Isotope eCommerce through 2.9.10 derives order identifiers f…5.9
- CVE-2026-96600Isotope eCommerce through 2.9.10 contains a blind SQL inject…5.5
- CVE-2026-96609Robur Albatross 1.0.0 through 2.x before 2.7.2 does not limi…7.1
- CVE-2026-96611FFmpeg before 9.0 has a signed integer overflow in libavform…6.9
- CVE-2026-9662The Recover Exit For WooCommerce plugin for WordPress is vul…8.1
Are you affected by CVE-2026-96560?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST