CVE-2026-96560— LightLLM 1.2.0 远程代码执行漏洞

一分钟漏洞结论

复制摘要 复制引用

影响对象

ModelTC LightLLM

利用判断

尚无明确在野利用证据，仍需结合暴露面评估

建议动作

优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious

CVE-2026-96560 影响 ModelTC LightLLM。尚无明确在野利用证据，仍需结合暴露面评估。LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pd_trans_mode nccl, which exposes an unauthenticated RPyC contro CVE-2026-96560 漏洞详情，神龙漏洞库，https://cve.imfht.com/detail/CVE-2026-96560

一、 漏洞 CVE-2026-96560 基础信息

受影响产品

二、漏洞 CVE-2026-96560 的公开POC

三、漏洞 CVE-2026-96560 的情报信息

CVE-2026-96560 其他参考 (1)

• 🔗 GitHub - ModelTC/LightLLM: LightLLM is a Python-based LLM (Large Language Model) inference and serving framework, notable for its lightweight design, easy scalability, and high-speed performance. · GitHub product

CVE-2026-96560 其他参考 (6)

• https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/router/model_infer/mode_backend/pd/nccl_kv_transporter.py#L437-L461 technical-description
• https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/router/model_infer/mode_backend/pd/kv_transporter.py#L20-L36 technical-description
• https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/router/model_infer/mode_backend/pd/nccl_kv_transporter.py#L411-L415 technical-description
• https://github.com/ModelTC/lightllm/blob/v1.2.0/lightllm/server/router/model_infer/mode_backend/pd/nccl_kv_transporter.py#L247-L249 technical-description
• https://github.com/ModelTC/LightLLM/issues/1590 issue-tracking
• https://www.vulncheck.com/advisories/lightllm-through-1.2.0-unauthenticated-remote-code-execution-via-nccl-pd-rpyc-control-channel third-party-advisory

• https://www.cve.org/CVERecord?id=CVE-2026-96560

IV. Related Vulnerabilities

V. Comments for CVE-2026-96560