As cited
Copy frozen at (site build).
vulnerabilities
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
A critical vulnerability in LMCache, open-source software that accelerates large language model (LLM) servers, permits unauthenticated remote code execution (RCE) on the cache server. The flaw exists in multiprocess mode where the cache runs as a standalone server accessible over ZeroMQ messaging library. No patched version is currently available.
Why it matters: Organizations running LMCache in multiprocess mode to support vLLM or other LLM servers face immediate RCE risk from network-accessible attackers; urgent workarounds or isolation measures are needed until a patch releases.
- Source published
- First seen by Cybersecurity Tracker