GHSA-mp8g-r7h2-5x36

Mooncake Distributed LLM KVCache Transfer Engine Vulnerable to Process Memory Disclosure and RCE (CVE-2026-103764)

A critical flaw in Mooncake distributed KVCache transfer engine allows unauthenticated TCP attackers to read and write arbitrary process memory, exposing LLM prompt caches.