CVE-2026-26220 | ModelTC LightLLM up to 1.1.0 WebSocket Endpoint pickle.loads deserialization

February 17, 2026 Yanac

A vulnerability was found in ModelTC LightLLM up to 1.1.0. It has been rated as critical. This affects the function pickle.loads of the component WebSocket Endpoint. Performing a manipulation results in deserialization.

This vulnerability is reported as CVE-2026-26220. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More