All issues

Search results

[BUG] Unauthenticated Remote Code Execution via RPyC Control Channel in NCCL PD Transport Mode

bugSomething isn't workingSomething isn't working

Status: Open.

#1590 In ModelTC/LightLLM;

· yyymk opened on Sep 22, 2026

[BUG]Missing authentication in /pd_register allows attackers to hijack requests and disclose user prompts

bugSomething isn't workingSomething isn't working

Status: Open.

#1576 In ModelTC/LightLLM;

· JPengLi opened on Sep 16, 2026

Potential out-of-bounds GPU memory indexing in token_attention CUDA kernel under high load

bugSomething isn't workingSomething isn't working

Status: Open.

#1567 In ModelTC/LightLLM;

· Aristarchus7 opened on Sep 11, 2026

[BUG]Unauthenticated Code Execution via Unsafe Pickle Deserialization in LightLLM Config Server /visual_register

bugSomething isn't workingSomething isn't working

Status: Open.

#1563 In ModelTC/LightLLM;

· JPengLi opened on Sep 10, 2026

Proposal: Approximate Speculative Decoding (ASD) acceptance for MTP - an acceptance-laxity dimension complementary to LightSpec

Status: Open.

#1552 In ModelTC/LightLLM;

· Kissmetothemoon opened on Sep 9, 2026

[BUG] _rms_norm_fwd_fused drops x_stride1 in its normalize pass, so a non-unit last-dim stride gives wrong output

Status: Open.

#1467 In ModelTC/LightLLM;

· truong-v opened on Aug 17, 2026

[BUG]Unauthenticated pickle deserialization via ZMQ wildcard bind in multinode startup → RCE

bugSomething isn't workingSomething isn't working

Status: Open.

#1413 In ModelTC/LightLLM;

· AAtomical opened on Jul 29, 2026

Corrupted T2I output from LightLLM + LightX2V colocate serving (/generate_image) while the reference examples/t2i/inference.py is correct

Status: Open.

#1403 In ModelTC/LightLLM;

· wfs2018 opened on Jul 24, 2026

[BUG] _fwd_kernel_ep_scatter_1: cross-warp stale read of expert_start_loc causes illegal memory access

bugSomething isn't workingSomething isn't working

Status: Open.

#1361 In ModelTC/LightLLM;

· HoniiTro19 opened on Jun 16, 2026

[BUG] too much overhead even for a 1b instruct model

bugSomething isn't workingSomething isn't working

Status: Open.

#1277 In ModelTC/LightLLM;

· JINO-ROHIT opened on Apr 18, 2026

deepseekv3 开启 tp + ep 的混合模式的时候，精度会下降。

Status: Open.

#1223 In ModelTC/LightLLM;

· hiworldwzj opened on Mar 10, 2026

CVE-2026-26220: Unauthenticated RCE via Pickle Deserialization in PD WebSocket Endpoints

Status: Open.

#1213 In ModelTC/LightLLM;

· Chocapikk opened on Feb 15, 2026