AIKIDO-2026-678481
lmcache is vulnerable to Remote Code Execution (RCE)
98
Critical Risk
This Affects:
lmcacheTL;DR
The unauthenticated /run_script endpoint evaluates Python submitted by the caller inside the LMCache process. Anyone who can reach that endpoint can run commands as the server process. No released version authenticates or removes this endpoint.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range and the internal API server is reachable by untrusted clients.
Background info
lmcache is vulnerable to Remote Code Execution (RCE) in versions 0.3.4 - 0.5.5.
How to fix this
There is no patched release yet. Do not expose the internal API server until a release authenticates or removes /run_script.
Links
Other
vulncheck.com/advisories/lmcache-through-0.5.5-unauthenticated-rce-via-run-script-endpoint
github.com/LMCache/LMCachegithub.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/internal_api_server/common/run_script_api.py#L54-L76github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/multiprocess/http_apis/common_api.py#L41-L46
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.