← All credits
Mingkai Yu
42 vulnerability records and advisories credit this contributor.
CVE-2026-103243
LightLLM through 1.2.0 Server-Side Request Forgery via multimodal endpoints
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
CVE-2026-103042
LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value
CVE-2026-103395
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service
CVE-2026-103270
LightLLM through 1.2.0 Missing Authentication on RL Control Routes
CVE-2026-103040
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service
CVE-2026-103041
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service
CVE-2026-102634
SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room
CVE-2026-94626
vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size
CVE-2026-96560
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel