LMCache: Missing authentication in multiprocess HTTP server management API
Summary
LMCache through version 0.5.5 exposes management endpoints of its multiprocess mode HTTP server without authentication, and the server listens on all interfaces by default. A remote, unauthenticated attacker who can reach the port can read environment variables, which may contain credentials, and the configuration via GET /env and GET /config. The attacker can also clear or delete cache objects and change tenant quotas to evict other tenants' cached data.
Affected
- LMCache through 0.5.5 (multiprocess mode HTTP server)
- Default configuration binds to 0.0.0.0:8080 (all interfaces)
Fixed in
Unknown. No fixed version has been published at the time of writing.
Workaround
- Block access to the LMCache management HTTP port from all untrusted networks using host or network firewall rules.
- Bind the server to 127.0.0.1 where remote management is not needed.
- Place the service behind an authenticating reverse proxy or VPN.
Exploitation
- Public proof-of-concept information is reported; CISA SSVC lists exploitation as "poc" and automatable as yes.
- No known exploitation in the wild (KEV) is reported.
- No authentication is required.
Our recommendation
- Inventory all LMCache installations and check whether multiprocess mode is in use.
- Block the management port from untrusted networks now and verify this with an external scan.
- Rotate any credentials that were present in the environment of an exposed instance.
- Monitor GitHub issue #5511 and the LMCache releases page for a fix and apply it when available.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- LMCache GitHub issue #5511 github.com
- VulnCheck advisory www.vulncheck.com
- LMCache project github.com
- LMCache env_api.py at v0.5.5 github.com
- LMCache quota_api.py at v0.5.5 github.com
- LMCache releases github.com
- OSV CVE-2026-107206 osv.dev
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 21:21.
Original description (NVD)
LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess mode HTTP server that allows remote unauthenticated attackers to access management endpoints listening on all interfaces by default. Attackers can read environment credentials via GET /env and configuration via GET /config, clear caches, delete cache objects, and modify tenant quotas to evict other tenants' cached data.
NVD references (7)
- https://github.com/LMCache/LMCache
- https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/env_api.py#L13
- https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/config.py#L206
- https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/quota_api.py#L138-L155
- https://github.com/LMCache/LMCache/issues/5511
- https://www.vulncheck.com/advisories/lmcache-through-0.5.5-missing-authentication-in-mp-http-server-managemen…
- https://github.com/LMCache/LMCache/issues/5511
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.