CVE-2026-10812
LOWzilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash
Title source: cnaDescription
A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument input_data["image"] results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. The exploitation is known to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.
References (7)
Core 7
Core References
Vdb Entry, Technical Description vdb-entry
technical-description
VDB-368260 | zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash
https://vuldb.com/vuln/368260
Signature, Permissions Required signature
permissions-required
VDB-368260 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/368260/cti
Third Party Advisory third-party-advisory
CVE-2026-10812 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-10812
Third Party Advisory third-party-advisory
Submit #831636 | zilliztech GPTCache 0.1.44 Cache poisoning / improper cache key generation
https://vuldb.com/submit/831636
Exploit exploit
issue-tracking
https://github.com/zilliztech/GPTCache/issues/684
Patch issue-tracking
patch
https://github.com/zilliztech/GPTCache/pull/678
Product product
https://github.com/zilliztech/GPTCache/
Scores
CVSS v3
3.6
EPSS
0.0009
EPSS Percentile
0.7%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-327
CWE-328
Status
published
Products (45)
zilliztech/GPTCache
0.1.0
zilliztech/GPTCache
0.1.1
zilliztech/GPTCache
0.1.10
zilliztech/GPTCache
0.1.11
zilliztech/GPTCache
0.1.12
zilliztech/GPTCache
0.1.13
zilliztech/GPTCache
0.1.14
zilliztech/GPTCache
0.1.15
zilliztech/GPTCache
0.1.16
zilliztech/GPTCache
0.1.17
... and 35 more
Published
Jun 04, 2026
Tracked Since
Jun 04, 2026