LMCache 0.5.5 Multiprocess Transport Remote Code Execution

LMCache versions 0.3.9 through 0.5.5 contain an unauthenticated pickle deserialization flaw in the multiprocess ZeroMQ transport that allows remote code execution. https://packetstorm.news/download/238913...

Exploit for CVE-2026-105192

B63-POC-CVE-2026-105192 — LMCache multiprocess transport RCE...

GHSA-W5F2-9Q9C-FF4H vulnerabilities

Vulnerabilities for packages: kserve-huggingfaceserver-cuda-13.3, lmcache-cuda-13.0...

CVE-2026-105192 vulnerabilities

Vulnerabilities for packages: kserve-huggingfaceserver-cuda-13.3, lmcache-cuda-13.0...

GHSA-W5F2-9Q9C-FF4H LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport Details LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. T...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-105192 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-105192 Source advisory: OSV:GHSA-W5F2-9Q9C-FF4H...

EUVD-2026-94261

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-105192 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-105192 Source advisory: GHSA-W5F2-9Q9C-FF4H...

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

Summary LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport Details LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. T...

PYSEC-2026-4306 vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

Affected - Ecosystem / package: pip / vllm - Affected versions: vLLM ≤ 0.25.1 confirmed on 0.25.1, commit 752a3a504485. The lower bound predates 0.25.1; maintainers can confirm how far back the loose cachesalt validator and unguarded scheduling-path lookup reach. Summary vLLM's OpenAI-compatible...

vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

Affected- Ecosystem / package: pip / vllm- Affected versions: vLLM ≤ 0.25.1 confirmed on 0.25.1, commit 752a3a504485. The lower bound predates 0.25.1; maintainers can confirm how far back the loose cachesalt validator and unguarded scheduling-path lookup reach. SummaryvLLM's OpenAI-compatible...

Exploit for CVE-2026-105192

CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...

CVE-2026-107205

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite...

CVE-2026-107207

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-107204

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /runscript endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded import, to...

CVE-2026-107206

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration...

Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

A critical vulnerability in LMCache , open-source software that speeds up large language model LLM servers such as vLLM, lets an attacker run code on the cache server without logging in. The project fixed the flaw in version 0.5.6, released on October 15. The flaw is in LMCache's multiprocess mod...

CVE-2026-107207

LMCache versions through 0.5.5 are vulnerable to a server-side request forgery (SSRF) vulnerability in the frontend monitoring service. Due to missing authentication in the frontend node catalog, unauthenticated attackers can register arbitrary hosts via POST /api/proxies . Once registered, these...

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...

CVE-2026-107207 LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies and then use /proxy or /proxy2 to reach...