CVE-2026-104433 | kvcache-ai Mooncake up to 0.3.11 Handshake include/common.h readString out-of-bounds

October 3, 2026 Yanac

A vulnerability marked as problematic has been reported in kvcache-ai Mooncake up to 0.3.11. Affected by this issue is the function readString of the file include/common.h of the component Handshake. The manipulation leads to out-of-bounds read.

This vulnerability is traded as CVE-2026-104433. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More