Skip to content
OpenAdvisories

Package · PyPI

lmcache

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2026-105192 Public exploit

    LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

    LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which …

    LMCache LMCache lmcache PyPI
  • Low 3.6
    CVE-2026-10813

    LMCache KV Cache utils.py hex_hash_to_int16 weak hash

    A flaw has been found in LMCache up to 0.5.4. This affects the function hex_hash_to_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched l…

    lmcache PyPI