Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Topic

CVE-2026-103395

News, analysis and practical guidance on CVE-2026-103395.

1 articleUpdated 1 Oct 2026

ThreatsCloud & SaaSBreaking
LightLLM Unauthenticated RPyC Insecure Deserialization Exposes GPU Inference Clusters to Remote Code Execution (CVE-2026-103395)
An unauthenticated RPyC service in LightLLM visual_only deployments enables remote attackers to execute arbitrary code on GPU clusters via pickle deserialization.
CST Newsroom1 Oct 202612 min read