LightLLM through 1.2.0 is vulnerable to unauthenticated RCE in the Config Server /visual_register WebSocket endpoint, which passes the first client frame directly to pickle.loads(). An attacker who can reach the Config Server port can send a crafted serialized payload (via reduce) to execute arbitrary code with Config Server process privileges. Restrict network access to the Config Server and upgrade when a fix is available.