CVE-2026-105192: Critical RCE Flaw in LMCache for vLLM

JFrog disclosed CVE-2026-105192, a CVSS 9.8 flaw in LMCache, the open-source KV-cache layer for vLLM inference servers. In multiprocess mode the cache server accepts messages without authentication and passes them to pickle.loads(), letting an unauthenticated attacker run code. No patch exists and a public PoC is available.

• CVSS 9.8: unauthenticated remote RCE via unsafe pickle deserialization (CWE-502)
• LMCache 0.3.9–0.5.5 in multiprocess mode are affected; no fixed release exists
• Cache server defaults to localhost but is often exposed on networks, and containers run as root
• A public PoC exists; no confirmed in-the-wild exploitation yet