CVE-2026-10813

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-10813
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10813.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-10813
Published
2026-06-04T14:45:10.552Z
Modified
2026-07-08T08:12:22.189160982Z
Severity
  • 1.1 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
LMCache KV Cache utils.py hex_hash_to_int16 weak hash
Details

A flaw has been found in LMCache up to 0.4.6. This affects the function hexhashto_int16 of the file lmcache/integration/vllm/utils.py of the component KV Cache Handler. Executing a manipulation can lead to use of weak hash. The attack needs to be launched locally. The attack requires a high level of complexity. It is indicated that the exploitability is difficult. The exploit has been published and may be used. The pull request to fix this issue awaits acceptance.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/10xxx/CVE-2026-10813.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-327",
        "CWE-328"
    ]
}
References

Affected packages

Git / github.com/lmcache/lmcache

Affected ranges

Type
GIT
Repo
https://github.com/lmcache/lmcache
Events
Introduced
a13ad6654d12f09eade42a766d92992bf85dfb81
Last affected
a7f22be7505fafdb154e5a0400a285aa29545f00
Database specific 
{
    "source": "AFFECTED_FIELD",
    "extracted_events": [
        {
            "introduced": "0.4.0"
        },
        {
            "last_affected": "0.4.0"
        },
        {
            "introduced": "0.4.1"
        },
        {
            "last_affected": "0.4.1"
        },
        {
            "introduced": "0.4.2"
        },
        {
            "last_affected": "0.4.2"
        },
        {
            "introduced": "0.4.3"
        },
        {
            "last_affected": "0.4.3"
        },
        {
            "introduced": "0.4.4"
        },
        {
            "last_affected": "0.4.4"
        },
        {
            "introduced": "0.4.5"
        },
        {
            "last_affected": "0.4.5"
        },
        {
            "introduced": "0.4.6"
        },
        {
            "last_affected": "0.4.6"
        }
    ]
}

Affected versions

0.*
0.4.0
0.4.1
0.4.2
0.4.3
0.4.4
0.4.5
0.4.6
Other
nightly-cu13
operator-latest
operator-v0.*
operator-v0.1.1
v0.*
v0.4.0
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.4.4-cu13
v0.4.5
v0.4.5-cu129
v0.4.6
v0.4.6-cu129

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-10813.json"