https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T09:31:43.670272+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-107205 fkie_cve-2026-107205 2026-10-08T09:31:43.701109+00:00

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite quotas via /quota endpoints, inject events via /events, and enumerate /directory/keys to disrupt caching and disclose placement metadata.

 https://vulnerability.circl.lu/vuln/ghsa-87j8-jqhj-hfm7 GHSA-87j8-jqhj-hfm7 2026-10-08T09:31:43.701224+00:00

LMCache through 0.5.5 contains a missing authentication vulnerability in the multiprocess coordinator that allows remote unauthenticated attackers to access its HTTP fleet control API listening on all interfaces by default. Attackers can register or deregister instances via /instances, overwrite quotas via /quota endpoints, inject events via /events, and enumerate /directory/keys to disrupt caching and disclose placement metadata.