# CVE-2026-105192: LMCache remote code execution via unsafe pickle deserialization

Source: https://junglewise.ai/threats/cve-2026-105192-lmcache-remote-code-execution-via-unsafe-deserialization-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-07. Updated: 2026-10-16  
License: CC BY 4.0 with a link back

CVE-2026-105192 · Severity: critical · CVSS 9.8 · Published 2026-10-07

LMCache is a cache management library that can operate in multiprocess mode on distributed deployments. When configured for multi-node setups, it opens an unauthenticated network port to coordinate cache between processes. An attacker with network access to this port can send a crafted message that triggers unsafe deserialization and executes arbitrary code with the privileges of the LMCache process, including root on official container deployments.

Technologies: [LMCache](https://junglewise.ai/threats/technologies/lmcache), [lmcache (PyPI)](https://junglewise.ai/threats/technologies/pypi-lmcache). Vendors: [LMCache](https://junglewise.ai/threats/vendors/lmcache), [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2026-105192 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-105192 being exploited in the wild.

**How severe is CVE-2026-105192?** Critical severity, with a CVSS score of 9.8, published 7 October 2026.

**Which products and versions are affected?** LMCache 0.3.9 through 0.5.5, 0.5.6 release candidates through 0.5.6rc3; lmcache (PyPI) >= 0.3.9, < 0.5.6, ECOSYSTEM:introduced=0.3.9,fixed=0.5.6.

**Is there a fix for CVE-2026-105192?** Yes. lmcache (PyPI): upgrade to 0.5.6 or later. Until then: Do not bind the multiprocess transport to a routable address; keep it on localhost or a trusted cluster network. Restrict access to the transport port (5555 by default) with firewall rules or network policies. Run LMCache as a non-root user rather than root.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-16", "note": "Advisory published"}, {"kind": "patched", "at": "2026-10-16", "note": "Fixed in version 0.5.6"}] Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-105192 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-105192?** Check whether you run LMCache or lmcache (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- lmcache (PyPI): upgrade to 0.5.6 or later

  ```sh
  pip install "lmcache>=0.5.6"
  ```


Do not bind the multiprocess transport to a routable address; keep it on localhost or a trusted cluster network. Restrict access to the transport port (5555 by default) with firewall rules or network policies. Run LMCache as a non-root user rather than root.</anigation>
<parameter name="timeline">[{"kind": "disclosed", "at": "2026-10-16", "note": "Advisory published"}, {"kind": "patched", "at": "2026-10-16", "note": "Fixed in version 0.5.6"}]

## Technical details

LMCache's multiprocess mode uses ZeroMQ (port 5555 default) to handle REGISTER_KV_CACHE messages without authentication. The transport deserializes msgpack extension code 1 using pickle.loads on device IPC wrapper objects during argument decoding, before any handler validation. An unauthenticated DEALER socket client can send a malicious msgpack-encoded REGISTER_KV_CACHE frame containing a crafted pickle payload to achieve remote code execution as the process user. The vulnerability affects versions 0.3.9 through 0.5.5 and is fixed in 0.5.6 via replacement of pickle with versioned, typed MessagePack validation.

## Affected products

- LMCache LMCache 0.3.9 through 0.5.5, 0.5.6 release candidates through 0.5.6rc3

## Identifiers

- CVE-2026-105192
- GHSA-w5f2-9q9c-ff4h

## Related threats

- [LMCache remote code execution via unsafe deserialization in multiprocess transport](https://junglewise.ai/threats/duplicate-advisory-remote-code-execution-via-unsafe-deserialization-in-d5a57f91)
- [LMCache weak hash collision in KV Cache Handler](https://junglewise.ai/threats/cve-2026-10813-lmcache-weak-hash-collision-in-kv-cache-handler)