Log in Start free

Vulnerability · Published Jun 4, 2026 · Assigned by VulDB

CVE-2026-10812zilliztech GPTCache Cache Key pre.py BufferedReader.peek weak hash

Low 3.6

In plain English

A low-severity broken cryptography in GPTCache from zilliztech. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 0% of all known vulnerabilities).

Severity (CVSS 3.1)3.6Low
Exploit odds (30 days)<0.1%top 99.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in zilliztech GPTCache up to 0.1.44. Affected by this issue is the function BufferedReader.peek of the file gptcache/processor/pre.py of the component Cache Key Handler. Performing a manipulation of the argument input_data["image"] results in use of weak hash. The attack must be initiated from a local position. The attack is considered to have high complexity. The exploitation is known to be difficult. The exploit is now public and may be used. The pull request to fix this issue awaits acceptance.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
PyPIgptcacheno fix listedGHSA-xfqj-4cr9-9gr5
PyPIgptcacheno fix listedPYSEC-2026-3468

Affected products (as reported)

VendorProductVersions
zilliztech GPTCache 0.1.00.1.10.1.20.1.30.1.40.1.50.1.60.1.7

Weakness: CWE-328, CWE-327 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R

References