High severity · published Oct 7, 2026
CVE-2026-107205
LMCache through 0.5.5 Missing Authentication in MP Coordinator Fleet Control API
8.6
CVSS
0.4%
EPSS
No
On KEV
Description
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite quotas via /quota endpoints, inject events via /events, and enumerate /directory/keys to disrupt caching and disclose placement metadata.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LM
LMCache · LMCache
through 0.5.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-107205
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-107205
issue-tracking
https://github.com/LMCache/LMCache/issues/5508
product
https://github.com/LMCache/LMCache
technical-description
https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/mp_coordinator/config.py#L71
technical-description
https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/mp_coordinator/app.py#L238-L246
third-party-advisory
https://www.vulncheck.com/advisories/lmcache-through-0.5.5-missing-authentication-in-mp-coordinator-fleet-control-api
More from LMCache
9.8
CVE-2026-107204
LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
9.8
CVE-2026-105192
LMCache Unauthenticated RCE in multiprocess mode via pickle deserialization
9.4
CVE-2026-107206
LMCache through 0.5.5 Missing Authentication in MP HTTP Server Management API
7.2
CVE-2026-107207
LMCache through 0.5.5 Missing Authentication in Frontend Node Catalog Allows SSRF Allowlist Bypass
3.6
CVE-2026-10813
LMCache KV Cache utils.py hex_hash_to_int16 weak hash