Topic

Cve 2026 103395

Coverage tagged cve 2026 103395.

Articles: 1
Desk: 1

Charcoal poster headed "LightLLM visual nodes: pickle RCE, no fix" with a large 9.8 CVSS v3.1 critical score from VulnCheck, a red "Unpatched, no fix as of 3 Oct 2026" stamp, affected versions up to 1.2.0, CVSS v4.0 9.3, and no reported exploitation not on CISA KEV .

highAI Security Cve 2026 103395

LightLLM Visual Nodes Expose Unauthenticated Pickle RCE (CVE-2026-103395), With No Fix Yet

LightLLM through 1.2.0 runs an unauthenticated, pickle-enabled RPyC service on visual_only nodes. Anyone who can reach the port can run code, and no fix exists yet.

Oct 3 · 6 min