Mooncake transfer engine before 0.3.13 Unauthenticated Arbitrary Memory Read/Write via TCP Transport
Priority HIGH 81CWE-822Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-822 and the CVSS impact.
Summary
Mooncake transfer engine before 0.3.13 contains an untrusted pointer dereference in ServerSession::readHeader that allows unauthenticated attackers to read and write arbitrary process memory via the TCP transport data port. Attackers can send a crafted SessionHeader with arbitrary addr and size values using READ or WRITE opcodes to disclose KV cache contents, prompts and secrets or corrupt memory toward code execution.
Why it matters now
Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00817 57th percentileScored 2026-11-07
Fix Fixed Mooncake (kvcache-ai): 0.3.13
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Poc
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| kvcache-ai | Mooncake | before 0.3.13 | 0.3.13 | Patch available | CNA |
- Mooncake Vendorkvcache-ai Affected before 0.3.13 Fixed in 0.3.13 Patch available CNA
Remediation
- Fix · CNA Mooncake (kvcache-ai) Fixed in 0.3.13
Timeline
- 2026-10-02 Threatist record created from CVE-2026-103764
- 2026-10-03 Alias added: GHSA-mp8g-r7h2-5x36
- 2026-10-25 EPSS moved to the 50th–90th percentile
References
More kvcache-ai vulnerabilities
- TI-2026-68428 Missing authentication in Mooncake Store REST service CVSS 4.0CRITICAL 9.3
- TI-2026-21201 KTransformers Unsafe Deserialization RCE via balance_serve CVSS 4.0CRITICAL 9.3
- TI-2026-65761 Mooncake through 0.3.13.post1 Missing Authentication in HTTP Metadata Server CVSS 4.0HIGH 8.8
- TI-2026-68429 Mooncake Store lets unauthenticated attackers delete any object CVSS 4.0HIGH 8.8
- TI-2026-67384 Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString CVSS 4.0HIGH 8.7
- TI-2026-65759 Mooncake transfer engine through 0.3.13.post1 Memory Exhaustion via Unbounded Notify Queue CVSS 4.0HIGH 8.7
Sources
- CVE-2026-103764 · CVE Program
- CVE-2026-103764 · NVD
- FIRST EPSS
- GHSA-mp8g-r7h2-5x36 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences