CVE-2026-105192

{
  "etk_id": "ETK-2026-864",
  "cve_id": "CVE-2026-105192",
  "display_id": "CVE-2026-105192",
  "ghsa_id": "GHSA-vv44-hjm2-qw2f",
  "euvd_id": "EUVD-2026-94261",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated unsafe deserialization in LMCache multiprocess mode",
  "summary": "LMCache deployments using multiprocess (distributed) mode are affected by unsafe processing of unauthenticated messages on the worker transport. An attacker able to reach that transport can execute code as the LMCache process; exposure is most likely when the endpoint is configured to accept remote connections.",
  "mitigation": "Disable multiprocess/distributed mode where it is not required. Keep the transport bound to loopback and restrict network access to it; no fixed lmcache version is recorded.",
  "vendor": "LMCache",
  "product": "LMCache",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0.3.9, <= *"
      ],
      "ecosystem": "pypi",
      "fixed_versions": [],
      "package_name": "lmcache",
      "purl": "pkg:pypi/lmcache"
    }
  ],
  "cwes": [
    502
  ],
  "cvss_score": 9.8,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
  "epss_score": 0.0048,
  "epss_percentile": 0.4029,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 78.17746206666666,
  "t0_at": "2026-10-07T09:40:11.449000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-08T05:33:03+00:00",
      "days": 0.8283744328703704,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T09:40:11.449000+00:00",
      "url": "https://github.com/rxsklife/CVE-2026-105192"
    },
    "trigger_signal": {
      "at": "2026-10-07T09:40:11.449000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-07T09:40:11.449000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-105192"
    }
  }
}