Skip to content
OpenAdvisories

Product · ModelTC

LightLLM

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-103243

    LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

    LightLLM through 1.2.0 fails to validate image_url and audio_url parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model …

    ModelTC LightLLM