CVE-2026-96764

Name of the Vulnerable Software and Affected Versions kvcache-ai mooncake versions 0.3.12 through 0.3.14-rc1

Description A weakness in the Regular Expression Handler component allows a remote attacker to perform a manipulation that leads to the allocation of resources. This issue specifically impacts the MasterService::GetReplicaListByRegex() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the MasterService::GetReplicaListByRegex() function to minimize the risk of exploitation.