Skip to content
OpenAdvisories

Vendor

LMCache

5 known vulnerabilities.

Products

LMCache 5
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-107206

    LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API

    LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment crede…

    LMCache LMCache
  • Critical 9.8
    CVE-2026-107204

    LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint

    LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app obje…

    LMCache LMCache
  • Critical 9.8
    CVE-2026-105192 Public exploit

    LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

    LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which …

    LMCache LMCache lmcache PyPI