Skip to content
OpenAdvisories

Vendor

LMCache

5 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • High 7.2

    LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass

    LMCache through 0.5.5 contains a server-side request forgery vulnerability in its frontend monitoring service that allows unauthenticated attackers to bypass the proxy allowlist by registering arbitrary hosts. Attackers can add entries via POST /api/proxies a…

  • High 8.6

    LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API

    LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregiste…