Read the docs
TI-2026-69186 Aliases CVE-2026-107204GHSA-xgvf-x9rh-chj9

LMCache Unauthenticated RCE via /run_script Endpoint

Priority HIGH 81CWE-306Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.

Summary

LMCache through 0.5.5 contains an unauthenticated remote code execution flaw in the /run_script endpoint, which accepts Python scripts from remote users. Missing authentication (CWE-306) lets a remote attacker run Python code without credentials. The GHSA advisory describes how an attacker recovers real builtins through the injected FastAPI app object, bypasses the guarded __import__, imports os and runs operating system commands as the LMCache process. CISA's SSVC data rates exploitation as proof of concept and technical impact as total.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded __import__, to import os and run operating system commands as the LMCache process.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00768 55th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
LMCacheLMCacheup to 0.5.5—No fix listedCNA
  • LMCache VendorLMCache Affected up to 0.5.5 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for LMCache.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-07 Threatist record created from CVE-2026-107204
  2. 2026-10-07 CISA SSVC decision points changed
  3. 2026-10-07 Priority changed: MEDIUM → HIGH
  4. 2026-10-07 Alias added: GHSA-xgvf-x9rh-chj9

References

Other 4

  • TI-2026-69188 Missing authentication in LMCache HTTP server exposes management API CVSS 4.0HIGH 8.8
  • TI-2026-69189 SSRF allowlist bypass in LMCache frontend lacks authentication CVSS 4.0MEDIUM 6.9
  • TI-2026-69101 Unauthenticated remote code execution in LMCache multiprocess mode CVSS 3.1CRITICAL 9.8
  • TI-2026-69187 Missing authentication in LMCache MP Coordinator fleet control API CVSS 4.0HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences