CVE-2026-104433— Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
Quick assessment
Affected
kvcache-ai Mooncake
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Mooncake 传输引擎 0.3.12 版本之前， 文件中的 函数存在一个越界读取漏洞。攻击者无需身份验证，通过发送一个长度为零的握手帧即可导致服务崩溃。攻击者可以连接到监听在所有网络接口上的握手端口，并发送一个八字节的数据帧，从而终止托管进程，例如 SGLang 推理服务器。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-104433
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Mooncake before 0.3.12 Out-of-Bounds Read via P2P Handshake readString
Source: CVE Program / CVE List V5
Vulnerability Description
Mooncake transfer engine before 0.3.12 contains an out-of-bounds read vulnerability in the readString function of include/common.h that allows unauthenticated attackers to crash the service by sending a zero-length handshake frame. Attackers can connect to the handshake port listening on all interfaces and send an eight-byte frame to terminate the hosting process, such as an SGLang inference server.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
跨界内存读
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| kvcache-ai | Mooncake | 0 ~ 0.3.12 | - |
|
II. Public POCs for CVE-2026-104433
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-104433
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-104433 (1)
Vendor Advisories for CVE-2026-104433 (1)
Proof of Concept for CVE-2026-104433 (1)
IV. Related Vulnerabilities
Same product: Mooncake
-
CVE-2026-103765
Mooncake through 0.3.13.post1 Missing Authentication in HTTP -
CVE-2026-103764
Mooncake transfer engine before 0.3.13 Unauthenticated Arbit -
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 Memory Exhaust -
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 Denial of Serv -
CVE-2026-96764
kvcache-ai mooncake Regular Expression GetReplicaListByRegex
Same vendor: kvcache-ai
-
CVE-2026-103764
Mooncake transfer engine before 0.3.13 Unauthenticated Arbit -
CVE-2026-103765
Mooncake through 0.3.13.post1 Missing Authentication in HTTP -
CVE-2026-103761
Mooncake transfer engine through 0.3.13.post1 Memory Exhaust -
CVE-2026-103760
Mooncake transfer engine through 0.3.13.post1 Denial of Serv -
CVE-2026-96764
kvcache-ai mooncake Regular Expression GetReplicaListByRegex
Same weakness: CWE-125
-
CVE-2026-79896
Fortra BoKS Manager boks_portmux TLS ClientHello out-of-boun -
CVE-2026-103678
Tnef: heap out-of-bounds read in get_rtf_data_from_buf() via -
CVE-2026-103641
Gegl: gegl04: gegl: out-of-bounds read in the radiance hdr u -
CVE-2026-47544
NVIDIA vGPU Linux越界读取致代码执行漏洞 -
CVE-2026-47536
NVIDIA vGPU Linux越界读取致代码执行漏洞
V. Comments for CVE-2026-104433
No comments yet