lmcache
PyPI2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting lmcachepage 1 of 1
- CVE-2026-105192CRITICALCVSS 9.8EG 9.8fixed in 0.5.62026-10-07
vulnerable: 0.3.10 ... 0.5.6rc5 (53 versions)
LMCache multiprocess mode, also called distributed mode, opens an unauthenticated ZeroMQ ROUTER so worker processes can register and share KV cache blocks. Messages on that socket are msgpack. Extension code 1 is passed to DeviceIPCWrapper…
- CVE-2026-10813LOWCVSS 3.6EG 3.62026-06-04
vulnerable: 0.3.0 ... 0.4.6 (26 versions)
A flaw has been found in LMCache up to 0.5.4. This affects the function hex_hash_to_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack ne…
Check whether lmcache is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for lmcache CVEs against the assets you own.
Book a Demo →