LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-105192 · Microsoft / collected KEV context

cve-program · CVE-2026-105192

• https://github.com/LMCache/LMCache
• https://pypi.org/project/lmcache/
• https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/platform/base/ipc_wrapper.py
• https://github.com/LMCache/LMCache/blob/v0.3.9/lmcache/v1/multiprocess/custom_types.py
• https://research.jfrog.com/vulnerabilities/lmcache-is-vulnerable-to-unauthenticated-remote-code-execution-via-pickle-deserialization-on-the-multiprocess-zmq-transport-cve-2026-105192-jfsa-2026-001694382/
• https://blog.lmcache.ai/en/2026/10/13/an-update-on-cve-2026-105192/
• https://github.com/LMCache/LMCache/security/advisories/GHSA-w5f2-9q9c-ff4h
• https://github.com/LMCache/LMCache/pull/5644
• https://github.com/LMCache/LMCache/releases/tag/v0.5.6
• https://github.com/LMCache/LMCache/pull/5684
• https://github.com/LMCache/LMCache/pull/5685

• LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization · Affected-version evidence changed · 29 Oct 2026