vulnerability
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
HighCVSS 9.8
Summary
A critical vulnerability (CVE-2026-105192) in LMCache, a software accelerating large language model servers like vLLM, allows unauthenticated attackers to execute code on the cache server. JFrog advises operators to avoid assigning a routable address to the server to mitigate the risk.
Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data