EUVD-2026-85751

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762: Authorization Bypass Through User-Controlled Key

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

CVE-2026-96762

The software kvcache-ai mooncake (versions up to 0.3.12 and 0.3.13.post1 ) contains a vulnerability in the RPC Path Handler component. Specifically, the UnmountSegment function is susceptible to an authorization bypass caused by the manipulation of the client_id/segment_id arguments. This flaw al...

CVE-2026-96762 kvcache-ai mooncake RPC Path UnmountSegment authorization

A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. This affects the function UnmountSegment of the component RPC Path Handler. This manipulation of the argument clientid/segmentid causes authorization bypass. Remote exploitation of the attack is possible. The exploit...

PT-2026-97625

Name of the Vulnerable Software and Affected Versions kvcache-ai mooncake versions 0.3.12 through 0.3.13.post1 Description An authorization bypass exists in the RPC Path Handler component. By manipulating the client id or segment id arguments within the UnmountSegment function, a remote attacker...