Unauthenticated RCE in LightLLM KV-transfer worker when started with –pd_trans_mode nccl. The exposed RPyC ThreadedServer control channel deserializes attacker-supplied pickled objects, x§allowing arbitrary code execution as the LightLLM service account. Affected: `LightLLM