The vulnerability is a server‑side request forgery in LMCache’s frontend monitoring service that allows attackers without authentication to register arbitrary proxy hosts via the /api/proxies endpoint. By doing so, they can bypass the built‑in proxy allowlist and use the /proxy or /proxy2 routes to reach and interact with internal services, read remote responses, or modify node state. This functionality represents a remote code execution threat, as it can be leveraged to execute arbitrary requests inside the network or disrupt normal operation.

The affected vendor is LMCache, product LMCache, for all releases up to and including 0.5.5. Versions beyond 0.5.5 are not impacted. The CVE entry does not list additional sub‑products or individual components; the issue resides in the frontend monitoring code.

The CVSS score of 6.9 indicates a medium‑high severity, while the EPSS score is not available, suggesting limited publicly documented exploitation. The vulnerability is not listed in the CISA KEV catalog. The attack vector is network‑based, requiring no authentication and allowing an attacker to send crafted POST requests to the proxy configuration endpoint, which is readily reachable on the public interface.