[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fECsESUATJ-OFXz1we9rAcTHlSTQhKv4PFDXSBMYepWM":3},{"article":4,"iocs":48,"watch_terms":56,"solutions":57,"lesson":152},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"35ccd5ec-2472-4390-b92e-1a3f2ebfddc7","Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely","unpatched-critical-lmcache-flaw-lets-unauthenticated-attackers-run-code-remotely-4d160a","A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available. The flaw is in LMCache's multiprocess mode, where the cache runs as a standalone server that LLM workers reach over the ZeroMQ messaging library. A single network","A critical vulnerability (CVE-2026-105192) in LMCache, an open-source LLM caching tool, allows unauthenticated attackers to execute arbitrary code on the server. The flaw, present in versions 0.3.9 through 0.5.6, stems from the use of Python's pickle module for deserializing data from an unauthenticated ZeroMQ socket. While the default configuration limits exposure, misconfigurations or specific deployment examples can expose the vulnerability, potentially allowing code execution with root privileges.","Critical LMCache vulnerability allows unauthenticated remote code execution.","https:\u002F\u002Fthehackernews.com\u002F2026\u002F10\u002Funpatched-critical-lmcache-flaw-lets.html","https:\u002F\u002Fblogger.googleusercontent.com\u002Fimg\u002Fb\u002FR29vZ2xl\u002FAVvXsEjyMSiFF8XNm1OpF4uWou7e4nt4fqsuPc0IXyUXhHky9w8ydKkauWm_j0yxdpMsRFlDx-5PHhtAxYNg3Z-rYqvexgILhokXO8tARRTtDHn2P83GOlUhiD6jN7rtkf3Ul1-Hp7O4VyvwV6EGNUgjmcC-B_o_P-xQy9eD7RaTnO_RoDpDwgjTePDvkjC9xso\u002Fs1600\u002Flm.jpg","2026-10-07T15:34:53+00:00","2026-10-07T18:00:14.350745+00:00",8,[17,20,22,25,27],{"name":18,"type":19},"LMCache","product",{"name":21,"type":19},"vLLM",{"name":23,"type":24},"ZeroMQ","technology",{"name":26,"type":24},"pickle",{"name":28,"type":29},"JFrog","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,38,43],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},{"category":39},{"id":40,"icon":32,"name":41,"slug":42},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",[49,53],{"type":50,"value":51,"context":52},"cve","CVE-2026-105192","Critical LMCache vulnerability allowing RCE",{"type":50,"value":54,"context":55},"CVE-2026-105756","vLLM denial-of-service vulnerability",[28,18,21],{"controls":58,"vendors":146},[59,88,117],{"slug":60,"name":61,"problem":62,"products":63},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[64,72,80],{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":89,"name":90,"problem":91,"products":92},"patch-management","Automated patch management","Known holes get closed in days, not months.",[93,101,109],{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":118,"name":119,"problem":120,"products":121},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[122,130,138],{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"vendor_slug":131,"vendor_name":132,"vendor_logo":133,"product_slug":134,"product_name":135,"url":136,"description":137},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",[147],{"slug":148,"name":28,"logo_path":149,"roles":150},"jfrog","\u002Fvendor-logos\u002Fjfrog.png",[151],"reported_by",{"slug":153,"title":154,"body":155,"framework_refs":156,"framework_notes":169},"unpatched-lmcache-flaw-enables-unauthenticated-remote-code-execution","Unpatched LMCache Flaw Enables Unauthenticated Remote Code Execution","A critical vulnerability in LMCache (CVE-2026-105192) exposes servers to unauthenticated remote code execution due to the unsafe use of Python's pickle deserialization module over an unauthenticated ZeroMQ socket. Pickle deserialization is a well-known dangerous pattern that can execute arbitrary code during the unpickling process, and exposing it without authentication is a fundamental design flaw. Compounding the risk, certain deployment examples and misconfigurations can expose the vulnerable socket beyond the default local scope, potentially granting attackers root-level access. This case highlights the danger of insecure defaults in open-source AI\u002FML tooling, a rapidly expanding attack surface that is often under-scrutinized in security reviews.",[157,158,159,160,161,162,163,164,165,166,167,168],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 12: Network Infrastructure Management","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 CM-6: Configuration Settings","NIST SP 800-53 AC-3: Access Enforcement","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 SA-9: External System Services (Supply Chain)","OWASP A08:2021 – Software and Data Integrity Failures (Insecure Deserialization)","NIST CSF ID.AM-2: Software platforms and applications inventoried","NIST CSF PR.IP-1: Baseline configuration established and maintained",{}]