Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
The Hacker News
Read the full articleA critical vulnerability in LMCache, used to speed up large language model servers like vLLM, allows unauthenticated remote code execution via its multiprocess mode when exposed on a network. The flaw, present in versions from 0.3.9 to 0.5.5 and beyond, has no patch yet, and operators are advised to restrict network exposure to mitigate risk.




