MO
Product
mooncake
13
CVEs
0
On KEV
9.8
Max CVSS
10
New 30D
Severity mix
Critical 3High 5Medium 5Low 0
Watch
Add mooncake to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-106040 | 8.2 | Oct 6 | Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC Affected: through 0.3.13.post1 |
| CVE-2026-106038 | 8.2 | Oct 6 | Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs Affected: through 0.3.13.post1 |
| CVE-2026-104433 | 7.5 | Oct 2 | Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString Affected: before 0.3.12 |
| CVE-2026-103761 | 7.5 | Oct 1 | Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue Affected: through 0.3.13.post1 |
| CVE-2026-96762 | 7.3 | Sep 23 | kvcache-ai mooncake RPC Path UnmountSegment authorization Affected: 0.3.0; 0.3.1; 0.3.2; 0.3.3; 0.3.4; 0.3.5; +8 more |
Showing 5