LMCache CVE-2026-105192 advisory updated for release 0.5.6

Evidence record

Reviewed GitHub advisory updated October 16 lists 0.5.6 as patched and explains typed MessagePack replacement; the ZeroMQ transport itself remains an authentication design concern in routable installations.

Read the original source ↗

Claim-level citations (3)

• supportsLMCache distributed ZeroMQ transport deserializes unauthenticated pickle payloads: The updated maintainer-linked security advisory identifies 0.5.6 as the fixed release for the unsafe Pickle decoder, replacing it with allowlisted typed MessagePack descriptors for ZeroMQ and gRPC; users must upgrade both ends together.

  Affected/patched versions and Patches section updated October 16

• supportsLMCache distributed ZeroMQ transport deserializes unauthenticated pickle payloads: LMCache multiprocess ZeroMQ transport remains architecturally unauthenticated in the documented design, and exposed/routable binding still requires network containment even after removal of the Pickle execution path.

  Details and Workarounds: transport auth, routable bind and network controls

• supportsLMCache distributed ZeroMQ transport deserializes unauthenticated pickle payloads: The GitHub-reviewed advisory explicitly lists LMCache 0.3.9 through versions before 0.5.6 as affected and version 0.5.6 as patched.

  GitHub advisory GHSA-w5f2-9q9c-ff4h, affected versions, patched version and summary