Skip to content
OpenAdvisories

Vendor

ModelTC

12 known vulnerabilities.

Products

LightLLM 11 LightX2V 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-108943

    ModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injection

    A weakness has been identified in ModelTC LightX2V up to 0.5.0. Affected is the function AutoTokenizer.from_pretrained of the file lightx2v/models/runners/cosmos3/cosmos3_runner.py of the component Tokenizer. This manipulation of the argument auto_map causes …

    ModelTC LightX2V
  • Medium 5.8
    CVE-2026-103243

    LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints

    LightLLM through 1.2.0 fails to validate image_url and audio_url parameters in multimodal endpoints, allowing unauthenticated attackers to perform server-side request forgery. Attackers can supply arbitrary URLs to fetch internal resources, with vision model …

    ModelTC LightLLM