LMCache flaw allows attackers to run remote code without logging in
According to The Hacker News, the vulnerability affects LMCache's multiprocess mode, which runs the cache as a separate server accessed by LLM workers through ZeroMQ. The publisher says no fixed version is available for the critical flaw in the open-source software, which accelerates LLM servers such as vLLM.
Covered by 2 publishers within 17 hours of the first report.
Reporting2
The Hacker News Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely · info@thehackernews.com (The Hacker News)
Cyber Security News Critical Cisco Nexus Flaws Let Unauthenticated Attackers Execute Code With Root Privileges · Abinaya