LMCache (Product): news timeline & CVEs

PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution

JFrog released a proof-of-concept for unauthenticated remote code execution in LMCache, tracked as CVE-2026-105192, with no patch.

JFrog Security Research published a proof-of-concept for CVE-2026-105192, a CVSS 9.8 flaw in LMCache multiprocess mode that allows unauthenticated remote code execution. The ZeroMQ service, default port 5555, decodes MessagePack and calls pickle.loads before validation, so one crafted DEALER message can run code as the LMCache process. Builds from 0.3.9 through PyPI 0.5.5 and 0.5.6 release candidates through 0.5.6rc3 were still unpatched on October 7. The issue is remotely reachable when the listener is bound to an address such as 0.0.0.0; a localhost-only setup is not exposed the same way.

Cyber Security NewsOct 8, 14:34 UTC · 10h agoExploit / PoC 3 sources CVE-2026-105192

Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available

Unpatched LMCache flaw CVE-2026-105192 allows unauthenticated remote code execution, and JFrog published a PoC.

JFrog disclosed CVE-2026-105192, a CVSS 9.8 LMCache flaw that lets unauthenticated attackers execute code on reachable multiprocess deployments by sending a malicious pickle object over an unauthenticated ZeroMQ transport. Deserialization happens while REGISTER_KV_CACHE arguments are decoded, before handler checks. The bug has been present since version 0.3.9 and remained unfixed through 0.5.5, candidates up to 0.5.6rc3, and the development branch when JFrog published a PoC on October 7, 2026. The 9.8 rating applies only when operators bind a routable address; the default is localhost, and LMCache inside a single vLLM process does not open the port.

GBHackersupdated Oct 8, 14:34 UTC · 10h agofirst Oct 8, 13:02 UTC · 12h agoExploit / PoC 3 sources CVE-2026-1051921

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Unpatched LMCache flaw CVE-2026-105192 lets unauthenticated attackers run code via pickle over ZeroMQ.

JFrog disclosed CVE-2026-105192, an unpatched critical flaw scored 9.8 in LMCache multiprocess mode, affecting versions 0.3.9 through 0.5.5, the 0.5.6 release candidates, and the development branch. The ZeroMQ server unpacks an unauthenticated message with Python pickle before checking its type, so a crafted message can run code as the LMCache user, which is root on official images. The server listens on localhost by default and is exposed only when bound to a routable address, including the project's example Kubernetes deployment. Separately, vLLM CVE-2026-105756, a 6.5 denial of service via a malformed cache_salt, was fixed in version 0.30.0.

The Hacker Newsupdated Oct 8, 14:34 UTC · 10h agofirst Oct 7, 15:34 UTC · 1d agoVulnerability 3 sources CVE-2026-105192 CVE-2026-105756

LMCache

Timeline3 articles

Related CVEsby mentions

Appears with

PoC Released for Critical LMCache Flaw Enabling Unauthenticated Remote Code Execution

Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available

Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely