Description

LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded __import__, to import os and run operating system commands as the LMCache process.

Related CPE's

Could not find any relations

References

https://github.com/LMCache/LMCache

https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/run_script_api.py#L54-L76

https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/common_api.py#L41-L46

https://github.com/LMCache/LMCache/issues/5510

https://www.vulncheck.com/advisories/lmcache-through-0.5.5-unauthenticated-rce-via-run-script-endpoint

https://github.com/LMCache/LMCache/issues/5510

Weaknesses

[email protected]

Secondary
CWE-306

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 · Critical

Information

Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-07T16:17:45.113Z

40 hours ago

Last modified

2026-10-08T21:07:19.997Z

12 hours ago