{"event":{"id":"evt-hist-phase31-jfrog-lmcache-rce-disclosure","dedupe_key":"open_source_security_vulnerability_disclosure:2026-10-07:jfrog-discloses-critical-lmcache-multiprocess-deserialization-vulnerability","event_type":"open_source_security_vulnerability_disclosure","title":"JFrog discloses critical LMCache multiprocess deserialization vulnerability","summary":"JFrog Oct 7 disclosed CVE-2026-105192 in exposed LMCache multiprocess transport; LMCache confirms fix merged Oct 12 for later 0.5.6, so Oct 7 publication does not imply all affected hosts patched or exploited.","occurred_at":"2026-10-07T00:00:00.000Z","published_at":"2026-10-07T00:00:00.000Z","observed_at":"2026-10-18T10:29:00.000Z","reconstructed_at":"2026-10-18T10:29:00.000Z","ingest_type":"historical_backfill","locations":null,"status":"verified","confidence":0.88,"metadata":{"evidence_only":1,"global_novelty_unproven":1,"independent_outcomes_unproven":1,"original_index_position":1137},"created_at":"2026-10-19T06:00:04.165Z","updated_at":"2026-10-19T06:00:04.165Z"},"artifacts":[{"id":"art-hist-phase31-jfrog-lmcache-rce-disclosure","dedupe_key":"f120703196b00b9bcf8683993579d762f17a49a0a7c116e24835d912a79103b6","canonical_url":"https://research.jfrog.com/vulnerabilities/lmcache-is-vulnerable-to-unauthenticated-remote-code-execution-via-pickle-deserialization-on-the-multiprocess-zmq-transport-cve-2026-105192-jfsa-2026-001694382/","evidence_locator":"","artifact_type":"original_publication","title":"JFrog discloses critical LMCache multiprocess deserialization vulnerability","summary":"","creator_entities":[],"released_at":"2026-10-07T00:00:00.000Z","content_hash":null,"metadata":[],"created_at":"2026-10-19T06:00:04.165Z","updated_at":"2026-10-19T06:00:04.165Z","relation":"documented_by"}],"signals":[]}