CVE-2026-107206
LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API
CVSS Score
9.4
EPSS Score
0.0%
EPSS Percentile
0th
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration via GET /config, clear caches, delete cache objects, and modify tenant quotas to evict other tenants' cached data.
| CWE | CWE-306 |
| Vendor | lmcache |
| Product | lmcache |
| Published | Oct 7, 2026 |
| Last Updated | Oct 7, 2026 |
Stay Ahead of the Next One
Get instant alerts for lmcache lmcache
Be the first to know when new critical vulnerabilities affecting lmcache lmcache are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
Low
Availability
High
Affected Versions
LMCache / LMCache
0 ≤ 0.5.5
References
github.com: https://github.com/LMCache/LMCache/issues/5511 github.com: https://github.com/LMCache/LMCache github.com: https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/config.py#L206 github.com: https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/env_api.py#L13 github.com: https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/quota_api.py#L138-L155 vulncheck.com: https://www.vulncheck.com/advisories/lmcache-through-0.5.5-missing-authentication-in-mp-http-server-management-api
Credits
Mingkai Yu Jiajia Liu