Vulnerabilitas Critica LMCache Non Patcherata Permittit Inauthenticatos Impugnatores Codicem Remotum Currere

Vulnerabilitas critica in LMCache, software aperto fonte quod accelerat servientes magnorum linguarum modelorum (LLM) sicut vLLM, permittit impugnatori codicem in servo cache currere sine inlogging, et nulla versio fixa praesto est.

Flaw in modo multiprocessu LMCache, ubi cache currit ut servus autonomus quem operarii LLM per bibliothecam nuntiorum ZeroMQ attingunt. Unum nuntium retis ad illum servum potest mandata currere ut usor cui LMCache processus currit.

Servus attingi potest ab alia machina tantum cum operator id ad audiendum in inscriptione routabili constituit, potius quam in localhost quod per default utitur.

JFrog hanc vulnerabilitatem die 7 Octobris patefecit et ei punctum severitatis 9.8 ex 10 attribuit, in ambitu critico, aestimationem quam servus ad inscriptionem routabilem accipit.

Vulnerabilitas, quae ut CVE-2026-105192 notatur, LMCache afficit a versione 0.3.9, quae mense Octobri 2025 edita est, usque ad 0.5.5, recentissimum stabilis editionem, et etiam in candidatis editionis 0.5.6 et ramus evolutionis praesens est. Nulla versio fixa existit.

Utrum servus exposita sit pendet ab uno configuratione. Per default, servus multiprocessus tantum in machina localis audit, ita alia machina ad eum attingere non potest. Attingibilis fit cum operator id cum inscriptione routabili incipit, simile modo multi-nodi deployment cache inter machinas communicat.

Exemplum proprium deployment Kubernetes LMCache servum ita incipit, audiens in omni interfacie retis. Copia LMCache currens intra unum processus vLLM portum omnino non aperit.

Socket ZeroMQ quem servus multiprocessus aperit ad processus operariorum ad registrandum et communicandum data cached nullam authenticationem habet. Unus typus nuntii cum pickle, forma Python quae codicem portare et currere potest dum data decoditur, explicatur. Servus id explicat dum adhuc argumenta nuntii legit, antequam ullum typum nuntii comprobatur, ita nuntius elaboratus potest codicem mittentis currere.

Codex currit cum privilegiis processus LMCache. In imaginibus officialibus continentium pro proiectu, ille processus ut radix currit, secundum JFrog. Flaw a Yuval Moravchick ex turma investigationis securitatis JFrog inventa est.

Nulla editio patchata existit. Usque ad unam navem, JFrog monet operadores ne servum multiprocessum inscriptionem routabilem assignent et portum in machina localis vel in rete clustro fideli servent. Firewall qui limitat quis ad portum attingere periculum minuit sed non tollit, quia quaelibet machina quae adhuc connexionem aperire potest codicem currere.

LMCache nullam advisum securitatis pro vulnerabilitate publicavit. Advisum JFrog non praebet operatoribus modum determinandi utrum servus iam impugnatus sit.

Alii Relationes et Relata vLLM Fix

Separatim, usor GitHub sex relationes securitatis LMCache die 6 Octobris aperuit, die antequam CVE-2026-105192 publicum factum est. Illi asserunt accessum inauthenticum ad data cached quae diversis tenantibus pertinent, necnon ad plures servitia retis quae mandata sine inlogging exsequentur.

Relationes ex uno rationem proveniunt, in probatione-conceptus assertionibus innituntur, et nullum CVE, nullam confirmationem a conservatoribus, et nullum fixum habent. Una ad default LMCache indicat quod postea mutatum est: servus HTTP admin qui in omni interfacie retis in 0.5.5 audiebat, nunc tantum in hoste locali in candidatis editionis 0.5.6 audit.

Vulnerabilitas relata in vLLM iam fixa est. Ante versionem 0.30.0, quae die 22 Septembris edita est, singularis petitio cum valore cache_salt male formatum machinam in deploymentibus quae connector multiprocessum LMCache utuntur, bug negationis servitii quae ut CVE-2026-105756 notatur, concutere potuit. Aestimatur 6.5 et non permittit executionem codicis.

Error principalis, tradens data ab socket retis inauthentico ad pickle, idem est quod investigatores in aliis frameworkis inference AI in Novembri 2025 invenerunt, in coetu defectuum quem ShadowMQ appellaverunt. Utrum codex LMCache commune fontem cum illis propositis communicet nondum stabilitum est.

Hanc artem interesting invenisti? Sequere nos in Google News, Twitter et LinkedIn ut plura contenta exclusiva quae publicamus legas.

Vulnerabilitates Relatae

CVE-2026-105192 CVSS 9.8 CRITICAL Deferred

CVE-2026-105192 - LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper.Deserialize, which calls pickle.loads, while the server is still decoding request arguments and before the handler runs. A single unauthenticated ZMQ DEALER message to the transport port (default 5555) therefore executes code as the user the LMCache process runs as. Official container images run that process as root. The transport binds to localhost unless the operator sets a routable address with --host, which is how multi-node deployments let peers connect.

CVE-2026-105756 CVSS 6.5 MEDIUM Analyzed

CVE-2026-105756 - vLLM: Loose `cache_salt` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream `ValueError` denial of service

vLLM is an inference and serving engine for large language models. Prior to 0.30.0, OpenAI-compatible request models accept a non-empty cache_salt value without enforcing the character and length restrictions required by the IPCCacheServerKey consumer in LMCache-MP. On deployments using the LMCache-MP connector, a salt that contains a forbidden character or exceeds the permitted length can raise an uncaught ValueError during scheduler cache lookup, causing EngineCore to terminate and denying service to all concurrent users. This issue is fixed in version 0.30.0.

CVE-2026-88772 CVSS 9.5 CRITICAL Analyzed

CVE-2026-88772 - Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability - [Actively Exploited]

Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service

Vulnerabilitas Critica LMCache Non Patcherata Permittit Inauthenticatos Impugnatores Codicem Remotum Currere

Vulnerabilitates Relatae

Plura ex The Hacker News