Login Request a demo
MO
Product
mooncake
by kvcache-ai · last CVE Oct 6, 2026
13
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Vulnerabilities13In the news0Timeline
Severity mix
Critical 3High 5Medium 5Low 0
Severity
All severities13Critical3High5Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mooncake to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106037
9.8
1%
Oct 6
Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service
Affected: through 0.3.13.post1
CVE-2026-103764
9.8
1%
Oct 1
Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
Affected: before 0.3.13
CVE-2026-103765
9.4
1%
Oct 1
Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server
Affected: through 0.3.13.post1
CVE-2026-106040
8.2
0%
Oct 6
Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC
Affected: through 0.3.13.post1
CVE-2026-106038
8.2
0%
Oct 6
Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs
Affected: through 0.3.13.post1
CVE-2026-104433
7.5
0%
Oct 2
Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
Affected: before 0.3.12
CVE-2026-103761
7.5
0%
Oct 1
Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue
Affected: through 0.3.13.post1
CVE-2026-96762
7.3
0%
Sep 23
kvcache-ai mooncake RPC Path UnmountSegment authorization
Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +8 more
CVE-2026-106041
6.5
0%
Oct 6
Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC
Affected: through 0.3.13.post1
CVE-2026-106039
6.5
0%
Oct 6
Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC
Affected: through 0.3.13.post1
CVE-2026-103760
5.9
1%
Oct 1
Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write
Affected: through 0.3.13.post1
CVE-2026-96763
5.4
0%
Sep 24
kvcache-ai mooncake MountSegment Request Processing segment.cpp access control
Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +9 more
CVE-2026-96764
4.3
0%
Sep 24
kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources
Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +8 more
Showing 13