importantSYS.SOURCE: The Hacker News• 2026-10-07T21:04:53+05:30

Unpatched Critical Vulnerability in LMCache Enables Remote Code Execution Without Authentication

#vulnerability #ai #cybersecurity #remote-code-execution

A critical unpatched vulnerability (CVE-2026-105192) in LMCache allows unauthenticated remote code execution via crafted ZeroMQ messages in its multiprocess mode. The flaw affects all versions from 0.3.9 to 0.5.6 and remains exploitable until a fix is released.

A critical vulnerability in LMCache, open-source software that speeds up large language model (LLM) servers such as vLLM, lets an attacker run code on the cache server without logging in, and no fixed version is available.

The flaw is in LMCache's multiprocess mode, where the cache runs as a standalone server that LLM workers reach over the ZeroMQ messaging library. A single network

Read original article

*** END OF TRANSMISSION ***

> MARGARET HAMILTON, APOLLO PROGRAM SOFTWARE LEAD, DIES AT 90 > NOUS RESEARCH ACHIEVES $1.5B VALUATION WITH ENTERPRISE AI AGENTS LAUNCH > MICROSOFT UNVEILS AI-POWERED PCS WITH NVIDIA RTX SPARK CHIPS AND ENHANCED WINDOWS 11 > ROSALIND FRANKLIN'S ROLE IN DNA STRUCTURE DISCOVERY REEXAMINED > MAJOR MATHEMATICAL BREAKTHROUGHS ANNOUNCED BY OPENAI > ICANN PUBLISHES 2026 NEW GENERIC TOP-LEVEL DOMAIN APPLICATIONS AND PROGRAM DETAILS > META AND MICROSOFT RESTRICT EMPLOYEE ACCESS TO CLAUDE AI, PRIORITIZE INTERNAL TOOLS > UNAUTHORIZED CERTIFICATE ISSUANCE VIA HIJACKED .GH, .SL, AND .AS DOMAINS TARGETING GOOGLE SERVICES > PROGRAMMING HEURISTIC: PUSHING CONDITIONALS UP AND LOOPS DOWN WITH ALGEBRAIC PERSPECTIVES > META'S MUSE AI ASSISTANT EXPANDS TO IPAD ONE MONTH AFTER MOBILE LAUNCH> MARGARET HAMILTON, APOLLO PROGRAM SOFTWARE LEAD, DIES AT 90 > NOUS RESEARCH ACHIEVES $1.5B VALUATION WITH ENTERPRISE AI AGENTS LAUNCH > MICROSOFT UNVEILS AI-POWERED PCS WITH NVIDIA RTX SPARK CHIPS AND ENHANCED WINDOWS 11 > ROSALIND FRANKLIN'S ROLE IN DNA STRUCTURE DISCOVERY REEXAMINED > MAJOR MATHEMATICAL BREAKTHROUGHS ANNOUNCED BY OPENAI > ICANN PUBLISHES 2026 NEW GENERIC TOP-LEVEL DOMAIN APPLICATIONS AND PROGRAM DETAILS > META AND MICROSOFT RESTRICT EMPLOYEE ACCESS TO CLAUDE AI, PRIORITIZE INTERNAL TOOLS > UNAUTHORIZED CERTIFICATE ISSUANCE VIA HIJACKED .GH, .SL, AND .AS DOMAINS TARGETING GOOGLE SERVICES > PROGRAMMING HEURISTIC: PUSHING CONDITIONALS UP AND LOOPS DOWN WITH ALGEBRAIC PERSPECTIVES > META'S MUSE AI ASSISTANT EXPANDS TO IPAD ONE MONTH AFTER MOBILE LAUNCH