Is CVE-2026-103040 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-103040?

CVE-2026-103040 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-103040

Description

LightLLM through 1.2.0 contains a remote code execution vulnerability in the router profiler service when started with --enable_profiling flag. The service exposes an unauthenticated RPyC server with pickle deserialization enabled, allowing attackers to execute arbitrary code by sending crafted serialized objects to the profiler command queue.