Vulnerabilidades em ModelTC
12 resultadosAnálise Vexday
ModelTC apresenta perfil de risco baixo com apenas 1 CVE registrada na base, sem evidências de exploração ativa em ambiente. A vulnerabilidade crítica identificada (CWE-502 - Desserialização de dados não confiáveis) representa um risco potencial em cenários de entrada não validada, mas sua ausência de atividade recente sugere adoção ainda limitada ou exposição reduzida.
CVE-2026-96560CRITICALLightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control ChannelEPSS 1.2%CVE-2026-90919CRITICALLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle DeserializationEPSS 1.1%CVE-2026-103040CRITICALLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC ServiceEPSS 1.0%CVE-2026-26220CRITICALLightLLM <= 1.1.0 PD Mode Unsafe Deserialization RCEEPSS 1.0%CVE-2026-103041CRITICALLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC ServiceEPSS 0.8%CVE-2026-93839CRITICALLightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket EndpointEPSS 0.8%CVE-2026-103042HIGHLightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_valueEPSS 0.6%CVE-2026-103395CRITICALLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC ServiceEPSS 0.6%CVE-2026-103270HIGHLightLLM through 1.2.0 Missing Authentication on RL Control RoutesEPSS 0.5%CVE-2026-111160HIGHLightLLM through 1.2.0 Unauthenticated DoS via pd_kv_trans_params DeserializationEPSS 0.4%CVE-2026-103243MEDIUMLightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpointsEPSS 0.3%CVE-2026-108943MEDIUMModelTC LightX2V Tokenizer cosmos3_runner.py AutoTokenizer.from_pretrained code injectionEPSS 0.2%