CVE-2026-105192

The LMCache multiprocess (distributed) mode is vulnerable to unauthenticated Remote Code Execution (RCE) due to insecure pickle deserialization . The application opens an unauthenticated ZeroMQ ROUTER socket (defaulting to port 5555 ) to allow worker processes to share KV cache blocks. When a ZMQ...