Login Request a demo
Critical severity · published Feb 17, 2026
CVE-2026-26220
LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE
9.3
CVSS
1%
EPSS
No
On KEV
Description
LightLLM version 1.1.0 and prior contain an unauthenticated remote code execution vulnerability in PD (prefill-decode) disaggregation mode. The PD master node exposes WebSocket endpoints that receive binary frames and pass the data directly to pickle.loads() without authentication or validation. A remote attacker who can reach the PD master can send a crafted payload to achieve arbitrary code execution.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
LightLLM · ModelTC
through 1.1.0 · source: vendor
Affected product
LI
LightLLM
ModelTC
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-26220
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-26220
chocapikk.com
https://chocapikk.com/posts/2026/lightllm-pickle-rce/
github.com
https://github.com/ModelTC/LightLLM/issues/1213
github.com
https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L310
github.com
https://github.com/ModelTC/lightllm/blob/a27dfc88c2144ed51a6e160b6fbe20aad66c8fe0/lightllm/server/api_http.py#L331
lightllm-en.readthedocs.io
https://lightllm-en.readthedocs.io/en/latest/index.html
www.vulncheck.com
https://www.vulncheck.com/advisories/lightllm-pd-mode-unsafe-deserialization-rce
More from LightLLM
9.8
CVE-2026-103395
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service
9.8
CVE-2026-103041
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service
9.8
CVE-2026-103040
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service
9.8
CVE-2026-96560
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel
9.8
CVE-2026-93839
LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint