Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

ModelTC — Vulnerabilities & Security Advisories 12

Browse all 12 CVE security advisories affecting ModelTC. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page provides a comprehensive aggregation of security vulnerabilities associated with ModelTC, focusing on general software weaknesses and product-specific flaws. It serves as a central resource for tracking security issues linked to this specific vendor and its ecosystem of offerings, allowing users to navigate complex threat landscapes with greater clarity and context regarding the underlying technical deficiencies. The content on this page collects publicly disclosed vulnerability data, including those identified through independent security research, third-party reports, and official vendor advisories. The database covers a broad time range, capturing historical security incidents from early disclosures up to recent updates, ensuring that both legacy risks and emerging threats are documented for thorough analysis and reference by security professionals and developers. Here, you can discover detailed information about how ModelTC handles security advisories, track the lifecycle of specific weakness classes within their products, and explore a complete vulnerability history for individual software components. This aggregation enables users to understand the frequency and nature of security issues, assess the vendor's responsiveness to reported flaws, and make informed decisions about risk mitigation and patch management strategies without relying on fragmented or incomplete data sources.

Top products by ModelTC: LightLLM LightX2V
CVE ID Title CVSS Severity Published
CVE-2026-111160 LightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params Deserialization — LightLLM CWE-502 7.5 High 2026-10-15
CVE-2026-108943 ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection — LightX2V CWE-94 5.3 Medium 2026-10-13
CVE-2026-103395 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service — LightLLM CWE-502 9.8 Critical 2026-09-30
CVE-2026-103270 LightLLM through 1.2.0 Missing Authentication on RL Control Routes — LightLLM CWE-306 7.5 High 2026-09-30
CVE-2026-103243 LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints — LightLLM CWE-918 5.8 Medium 2026-09-30
CVE-2026-103042 LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value — LightLLM CWE-770 7.5 High 2026-09-29
CVE-2026-103041 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service — LightLLM CWE-502 9.8 Critical 2026-09-29
CVE-2026-103040 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service — LightLLM CWE-502 9.8 Critical 2026-09-29
CVE-2026-96560 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel — LightLLM CWE-502 9.8 Critical 2026-09-23
CVE-2026-93839 LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint — LightLLM CWE-306 9.8 Critical 2026-09-18
CVE-2026-90919 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization — LightLLM CWE-502 9.8 Critical 2026-09-14
CVE-2026-26220 LightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCE — LightLLM CWE-502 9.8AI Critical AI 2026-02-17

This page lists every published CVE security advisory associated with ModelTC. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.