LMCache Distributed Mode Unauthenticated Code Execution

Executive Summary

This vulnerability allows unauthenticated remote code execution via a ZeroMQ ROUTER socket in LMCache's multiprocess mode. An attacker can send a specially crafted msgpack message with extension code 1 to the default port 5555. This triggers pickle.loads in DeviceIPCWrapper.Deserialize before input validation, executing arbitrary code as the user running the LMCache process. Official container images run this process as root.

Useful 0 Not Useful 0

Detection Guidance

Check if LMCache is running in multiprocess mode by inspecting running processes for the LMCache service and verifying if port 5555 is open and listening on localhost or a routable address. Use commands like 'netstat -tulnp | grep 5555' or 'ss -tulnp | grep 5555' to check for open ports. Inspect logs for unauthorized ZeroMQ ROUTER connections or unexpected pickle deserialization events.

• Verify LMCache process ownership with 'ps aux | grep LMCache' to confirm if it runs as root.
• Monitor network traffic for unauthenticated DEALER messages to port 5555 using tools like Wireshark or tcpdump.

Useful 0 Not Useful 0

Impact Analysis

An attacker could gain full control of the system running LMCache, install malware, steal data, or disrupt services. Since the transport binds to localhost by default, local network access is sufficient to exploit this. If the operator exposed the port to a routable address, remote attackers could also exploit it.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and system integrity. GDPR requires adequate security measures to protect personal data, while HIPAA mandates safeguards for protected health information. A remote code execution flaw could lead to unauthorized access, data breaches, or system compromise, resulting in regulatory penalties and loss of trust.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately stop LMCache multiprocess mode if enabled. Disable the ZeroMQ ROUTER socket by not using the --host flag for routable addresses. Update LMCache to a patched version if available. Restrict network access to port 5555 using firewalls to allow only trusted internal communications.

• Run LMCache processes with least-privilege user accounts instead of root to limit potential damage from exploitation.
• Monitor for signs of compromise such as unexpected process execution or unauthorized network connections.

Useful 0 Not Useful 0