PT-2026-64090

A flaw has been found in LMCache up to 0.4.6. This affects the function hex hash to int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high lev...

GHSA-6V7P-G79W-8964 vulnerabilities

Vulnerabilities for packages: synapse, openstack-kolla-toolbox-2025.1-fips, openstack-glance-2026.1-fips, openstack-kolla-toolbox-2025.2, nemo-rl-cuda-13.0, openstack-placement-2026.1-fips, nemo, superset, graalvm, kubeflow-katib, nvidia-nsight-compute-13.3, airflow, awx, py3-hashin, request-1276...

GHSA-4XGF-CPJX-PC3J vulnerabilities

Vulnerabilities for packages: azureml-inference-server-http, airflow-core, prefect, tritonserver-backend-vllm-cuda-12.9, airflow-postgres-fips, azureml-inference-server-http-fips, open-webui, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-13.0, litellm, semgrep, airflow, lmcache-cuda-12.8,...

CVE-2026-10813

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

GHSA-3HH9-752G-5G22 LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-10813 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-10813 Source advisory: OSV:GHSA-3HH9-752G-5G22...

lmcache-vllm (>=0.6.1rc1, <=0.6.2.1) potentially affected by CVE-2026-10813 via lmcache (0.4.3)

lmcache PYPI version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on lmcache and may be impacted: - lmcache-vllm =0.6.1rc1, =0.6.2.1 Source cves: CVE-2026-10813 Source advisory: GHSA-3HH9-752G-5G22...

LMCache: 16-bit multimodal hash collision can poison KV cache entries

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

Use of Weak Hash

Overview lmcache is an A LLM serving engine extension to reduce TTFT and increase throughput, especially under long-context scenarios. Affected versions of this package are vulnerable to Use of Weak Hash in the hexhashtoint16 function of the KV Cache Handler process. An attacker can compromise da...

CVE-2026-10813

A flaw has been found in LMCache up to 0.5.4. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

CVE-2026-10813 LMCache KV Cache utils.py hex_hash_to_int16 weak hash

A flaw has been found in LMCache up to 0.5.4. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

EUVD-2026-34290

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

CVE-2026-10813 LMCache KV Cache utils.py hex_hash_to_int16 weak hash

A flaw has been found in LMCache up to 0.5.4. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

CVE-2026-10813

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

CVE-2026-10813 LMCache KV Cache utils.py hex_hash_to_int16 weak hash

A flaw has been found in LMCache up to 0.5.4. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

PT-2026-46251

Name of the Vulnerable Software and Affected Versions LMCache versions prior to 0.4.7 Description A flaw in the KV Cache Handler component affects the hex hash to int16 function within the lmcache/integration/vllm/utils.py file. A local attacker can perform a manipulation that leads to the use of...

LMCache security vulnerabilities

LMCache is an open-source large-scale caching tool developed by LMCache. Versions of LMCache 0.4.6 and earlier contained security vulnerabilities. These vulnerabilities stemmed from the hexhashtoint16 function in the KV Cache Handler component’s lmcache/integration/vllm/utils.py file, which used ...

CVE-2026-10813: Use of Weak Hash

A flaw has been found in LMCache up to 0.5.4. This affects the function hexhashtoint16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level ...

decoding (>=0.1.0, <=0.1.0.post1), genomeocean (>=0.1.0, <=0.5.0) +1 more potentially affected by CVE-2025-48887 via vllm (0.6.1.post2)

vllm PYPI version 0.6.1.post2 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - decoding =0.1.0, =0.1.0, =0.6.1rc1, =0.6.2.1 Source cves: CVE-2025-48887 Source advisory: OSV:PYSEC-2025-50...

decoding (0.1.1), lmcache-vllm (0.6.2.3) +2 more potentially affected by CVE-2025-32444 via vllm (0.6.2)

vllm PYPI version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on vllm and may be impacted: - decoding 0.1.1 - lmcache-vllm 0.6.2.3 - oat-llm =0.0.1, =0.1.0, =0.1.1 Source cves: CVE-2025-32444 Source advisory: OSV:PYSEC-2025-42...