{"id":"CVE-2026-107204","published":"2026-10-07T16:17:45.113","lastModified":"2026-10-08T21:07:19.997","description":"LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded __import__, to import os and run operating system commands as the LMCache process.","cvssScore":9.8,"cvssSeverity":"CRITICAL","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-306"],"vendors":[],"products":[],"references":[{"url":"https://github.com/LMCache/LMCache","tags":[]},{"url":"https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/run_script_api.py#L54-L76","tags":[]},{"url":"https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/common_api.py#L41-L46","tags":[]},{"url":"https://github.com/LMCache/LMCache/issues/5510","tags":[]},{"url":"https://www.vulncheck.com/advisories/lmcache-through-0.5.5-unauthenticated-rce-via-run-script-endpoint","tags":[]},{"url":"https://github.com/LMCache/LMCache/issues/5510","tags":[]}],"exploitRefs":[{"url":"https://github.com/LMCache/LMCache","tags":[]},{"url":"https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/run_script_api.py#L54-L76","tags":[]},{"url":"https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/common_api.py#L41-L46","tags":[]},{"url":"https://github.com/LMCache/LMCache/issues/5510","tags":[]},{"url":"https://github.com/LMCache/LMCache/issues/5510","tags":[]}],"hasPoc":true,"ai":{"summary":"The vulnerability allows unauthenticated attackers to execute Python code via the /run_script endpoint, leading to remote code execution.","exploitability":"Exploitation is relatively straightforward as it requires posting scripts to the /run_script endpoint without authentication.","blast_radius":"If exploited, attackers can execute arbitrary code as the LMCache process, potentially leading to full system compromise.","remediation":"Upgrade to LMCache 0.5.6 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","web","unauth","python","fastapi"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-08T08:40:42.374Z"}}