EUVD-2026-85753

A weakness has been identified in kvcache-ai mooncake up to 0.3.12/0.3.14-rc1. Impacted is the function MasterService::GetReplicaListByRegex of the component Regular Expression Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The...

EUVD-2026-85752

A security flaw has been discovered in kvcache-ai mooncake up to 0.3.12/0.3.13.post1/0.3.14-rc1. This issue affects the function ScopedSegmentAccess::MountSegment of the file segment.cpp of the component MountSegment Request Processing. Performing a manipulation results in improper access control...

CVE-2026-96764

A vulnerability exists in kvcache-ai mooncake versions up to 0.3.12/0.3.14-rc1 . The flaw is located in the Regular Expression Handler component, specifically within the MasterService::GetReplicaListByRegex function. An attacker can perform a remote manipulation that leads to an allocation of res...

CVE-2026-96763

The kvcache-ai mooncake software (versions up to 0.3.12 , 0.3.13.post1 , and 0.3.14-rc1 ) contains a security flaw in the MountSegment Request Processing component. Specifically, the ScopedSegmentAccess::MountSegment function within the segment.cpp file is susceptible to improper access controls ...

CVE-2026-96762

The software kvcache-ai mooncake (versions up to 0.3.12 and 0.3.13.post1 ) contains a vulnerability in the RPC Path Handler component. Specifically, the UnmountSegment function is susceptible to an authorization bypass caused by the manipulation of the client_id/segment_id arguments. This flaw al...