Reported by 7 outlets
CVE-2026-105192: Unpatched critical RCE in LMCache (CVSS 9.8)
Why this score
- Breadth
- 2.00 / 2.0 · 7 sources
- Authority
- 1.80 / 2.0 · best outlet weight
- Severity
- 4.90 / 5.0 · CVSS + content signals
- Velocity
- 0.00 / 2.0 · updates in 48h
- Pickup speed
- 0.60 / 0.6 · time to second source
- Recency
- × 0.05 temporal multiplier
- Community
- + 0.00 / 1.5 · reddit signal
- Score
- 0.5 / 10 = base × recency + community
Desk analysis
CVE-2026-105192 (CVSS 9.8) is an unpatched critical remote code execution in LMCache, the KV-cache server used by vLLM. The flaw exposes an unauthenticated attack surface in multiprocess mode with no patch available and high exposure risk. A related CVE-2026-105281 (CVE-2026-100730 referenced in some sources) covers openPDC openHistorian vulnerabilities that CISA urges patching. The LMCache issue specifically affects AI inference infrastructure and should be prioritized for isolation until a vendor fix is released.
Timeline
-
original reporting
🤖 CVE-2026-105192 (CVSS 9.8): unpatched RCE in LMCache, the KV-cache server used by vLLM. Multiprocess mode exposes an unauthenticated ZeroM
thehackernews.com · 6d ago · October 8th, 2026
🤖 CVE-2026-105192 (CVSS 9.8): unpatched RCE in LMCache, the KV-cache server used by vLLM. Multiprocess mode exposes an unauthenticated ZeroM
via Mastodon https://thehackernews.com/2026/10/unpatched-critical-lmcache-flaw-lets.html
-
update from research.jfrog.com
LMCache is vulnerable to Unauthenticated Remote Code Execution via Pickle Deserialization on the Multiprocess ZMQ Transport (JFSA-2026-001694382)
research.jfrog.com · 7d ago · October 7th, 2026
JFrog Security Research disclosed CVE-2026-105192 on 7 October 2026, rating it critical (CVSS 9.8). The flaw affects LMCache versions 0.3.9 through 0.5.5 and the current dev branch, allowing unauthenticated remote code execution over the multiprocess ZeroMQ transport (default port 5555) via unsafe pickle deserialization in DeviceIPCWrapper.Deserialize. Official container images run the server as root. No fixed version exists.
-
update from thehackernews.com
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
thehackernews.com · 7d ago · October 7th, 2026
The Hacker News reported the same flaw on 7 October 2026, noting LMCache's multiprocess mode exposes an unauthenticated server when bound to a routable address rather than localhost. A single ZeroMQ message using msgpack extension code 1 triggers pickle.loads before the message type is validated, running code as the LMCache process user. Versions affected span 0.3.9 to 0.5.5 with no patch available; the official Kubernetes daemonset example listens on 0.0.0.0:5555.
-
update from beyondmachines.net
Unpatched Critical RCE Vulnerability in LMCache Exposes LLM Infrastructure to Remote Takeover LMCache suffers from a critical unpatched vuln
beyondmachines.net · 5d ago · October 8th, 2026
Unpatched Critical RCE Vulnerability in LMCache Exposes LLM Infrastructure to Remote Takeover LMCache suffers from a critical unpatched vuln
via Mastodon https://beyondmachines.net/event_details/unpatched-critical-rce-vulnerability-in-lmcache-exposes-llm-infrastructure-to-remote-takeover-u-2-9-i-r/gD2P6Ple2L
-
update from gbhackers.com
Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available
gbhackers.com · 5d ago · October 8th, 2026
A critical vulnerability in LMCache allows unauthenticated attackers to execute arbitrary code against reachable multi-process deployments by exploiting unsafe Python pickle deserialization. This flaw is tracked as CVE-2026-105192 and has a CVSS score of 9.8. JFrog published an advisory and a public proof-of-concept exploit on October 7, 2026, stating that no fixed release was available […] The post Critical LMCache RCE Vulnerability Remains Unpatched, Public PoC Exploit Available appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .
-
update from meterpreter.org
Explore the critical LMCache vulnerability CVE-2026-105192. Learn how insecure ZeroMQ configurations and Python pickle deserialization lead
meterpreter.org · 4d ago · October 9th, 2026
Learn how insecure ZeroMQ configurations and Python pickle deserialization lead
via Mastodon https://meterpreter.org/critical-lmcache-vulnerability-cve-2026-105192/?utm_source=mastodon&utm_medium=jetpack_social
-
update from cybersecurefox.com
Critical RCE in LMCache: No Patch, High Exposure Risk 🔗 https:// cybersecurefox.com/en/critical -rce-in-lmcache-no-patch # lmcache # vulnera
cybersecurefox.com · 4d ago · October 9th, 2026
Critical RCE in LMCache: No Patch, High Exposure Risk 🔗 https:// cybersecurefox.com/en/critical -rce-in-lmcache-no-patch # lmcache # vulnera
via Mastodon https://cybersecurefox.com/en/critical-rce-in-lmcache-no-patch
-
update from securityonline.info
Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws imme
securityonline.info · 4d ago · October 9th, 2026
Fix critical openPDC openHistorian vulnerabilities like CVE-2026-100730 and CVE-2026-105281. CISA urges patching these severe RCE flaws imme
via Mastodon https://securityonline.info/openpdc-openhistorian-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social