CVE-2026-107204 LMCache through 0.5.5 Unauthenticated RCE via /run_script Endpoint
Remote attackers can execute arbitrary Python code via the /run_script endpoint in LMCache, leading to full system compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-107204?
CVE-2026-107204 is a critical code injection vulnerability in LMCache, published on 7 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
LMCache through 0.5.5 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute Python code by posting scripts to the /run_script endpoint. Attackers can recover real builtins through the injected FastAPI app object, bypassing the guarded __import__, to import os and run operating system commands as the LMCache process.
Weakness: CWE-306
Which versions are affected by CVE-2026-107204?
How do I fix CVE-2026-107204?
No fix has been published for CVE-2026-107204 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-107204 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-107204 exists.
Sources
Also known as GHSA-xgvf-x9rh-chj9.