{"vulnerability": "cve-2026-93839", "sightings": [{"uuid": "2c6f37b5-1397-4e10-8f90-e1b3debc3721", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvt2uw4cuz2r", "content": "\ud83d\udd34 CVE-2026-93839 - Critical (9.8)\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSoc...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-93839/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-18T21:01:55.684773Z"}, {"uuid": "99b40574-45dd-4606-b648-80cd090adb87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-93839", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/117294202459185526", "content": "Go hack more LLM shit.\nhttps://nvd.nist.gov/vuln/detail/cve-2026-93839\nsev:CRIT 9.3 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoint that allows unauthenticated attackers to register arbitrary nodes by supplying crafted JSON without peer address validation. Attackers can disclose full user prompts routed to their socket, trigger denial of service by replacing legitimate nodes, or make the PD Master issue requests to internal network addresses.", "creation_timestamp": "2026-09-18T21:38:14.459079Z"}, {"uuid": "84b34667-b65b-458e-8613-dff37b8e64b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvt6pjymle2f", "content": "\ud83d\udea8 CVE-2026-93839 \u2014 CVSS 9.3 CRITICAL\n\nLightLLM through 1.2.0 contains an authentication bypass vulnerability in the /pd_register WebSocket endpoi...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93839\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-18T22:10:28.779187Z"}, {"uuid": "3476cb36-ee91-4fc6-9b7e-70d81e584fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/dygtxf5k7iy37", "content": "CVE-2026-93839 - LightLLM through 1.2.0 Missing Authentication in PD Master /pd_register WebSocket Endpoint\nCVE ID : CVE-2026-93839\n \n Published : Sept. 18, 2026, 8:17 p.m. | 1\u00a0hour, 5\u00a0minutes ago\n \n Description : LightLLM through 1.2.0 contains an authentication bypass vulner...", "creation_timestamp": "2026-09-18T22:10:31.657360Z"}, {"uuid": "eeb51155-e243-4b67-acd3-4ee12151098f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-93839", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvtebn6cxr2r", "content": "CVE-2026-93839\nLightLLM versions up through 1.2.0 let anyone connect to its /pd_register WebSocket address and add their own nodes without proving who they are. Doing this can let an attacker see the questions users type,\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-09-18T23:50:05.069543Z"}]}