Kkvcache-ai

Products

Exploited and recent CVEs

• CVE-2026-106041 Medium 6.5 Mooncake Store through 0.3.13.post1 Missing Authorization via NotifyOffloadSuccess RPC 0.3%
• CVE-2026-106040 High 8.2 Mooncake Store through 0.3.13.post1 Missing Authorization via EvictDiskReplica RPC 0.4%
• CVE-2026-106039 Medium 6.5 Mooncake Store through 0.3.13.post1 Missing Authorization in Replication Task RPC 0.3%
• CVE-2026-106038 High 8.2 Mooncake Store through 0.3.13.post1 Unauthenticated Object Deletion via Remove RPCs 0.5%
• CVE-2026-106037 Critical 9.8 Mooncake through 0.3.13.post1 Missing Authentication in Store REST Service 0.7%
• CVE-2026-104433 High 7.5 Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString 0.5%
• CVE-2026-103765 Critical 9.4 Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server 0.6%
• CVE-2026-103764 Critical 9.8 Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport 0.8%
• CVE-2026-103761 High 7.5 Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue 0.5%
• CVE-2026-103760 Medium 5.9 Mooncake transfer engine through 0.3.13.post1 Denial of Service via P2P Handshake Daemon Response Write 0.5%
• CVE-2026-96764 Medium 4.3 kvcache-ai mooncake Regular Expression GetReplicaListByRegex allocation of resources 0.3%
• CVE-2026-96763 Medium 5.4 kvcache-ai mooncake MountSegment Request Processing segment.cpp access control 0.2%
• CVE-2026-96762 High 7.3 kvcache-ai mooncake RPC Path UnmountSegment authorization 0.3%
• CVE-2026-63767 Critical 9.8 ktransformers Unauthenticated Pickle Deserialization RCE via ZMQ 1.1%
• CVE-2026-26210 Critical 9.8 KTransformers Unsafe Deserialization RCE via balance_serve 0.7%