Is CVE-2026-96560 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-96560 being exploited in the wild.

How severe is CVE-2026-96560?

Critical severity, with a CVSS score of 9.8, published 23 September 2026.

Which products and versions are affected?

ModelTC LightLLM through 1.2.0.

Is there a fix for CVE-2026-96560?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-96560 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-96560?

Check whether you run ModelTC LightLLM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-96560: LightLLM KV-transfer worker remote code execution in NCCL mode

CVE-2026-96560 · Severity: critical · CVSS 9.8 · Published 2026-09-23

LightLLM is a Python-based framework for serving large language models. When started with NCCL transport mode enabled, the KV-transfer worker exposes an unauthenticated remote procedure call interface that deserializes untrusted data, allowing attackers to execute arbitrary code on the server hosting the inference service.

Technologies: ModelTC LightLLM. Vendors: ModelTC.

Quick answers

Is CVE-2026-96560 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-96560 being exploited in the wild.
How severe is CVE-2026-96560?: Critical severity, with a CVSS score of 9.8, published 23 September 2026.
Which products and versions are affected?: ModelTC LightLLM through 1.2.0.
Is there a fix for CVE-2026-96560?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-96560 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-96560?: Check whether you run ModelTC LightLLM at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The vulnerability exists in the KV-transfer worker's RPyC ThreadedServer implementation, which lacks authentication and safely deserializes attacker-controlled pickled objects when --pd_trans_mode nccl is configured. An unauthenticated network attacker can send malicious serialized objects to trigger arbitrary code execution with the privileges of the LightLLM service process. The vulnerability affects versions through 1.2.0 and requires the specific NCCL transport mode to be enabled.

Affected products

ModelTC LightLLM through 1.2.0

Timeline

2026-09-23: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.