Mooncake Store: Missing authorization in EvictDiskReplica RPC allows deleting disk replicas
Summary
Mooncake Store, a distributed KV cache component used in AI inference environments, does not check authorization for the EvictDiskReplica and BatchEvictDiskReplica RPC calls. An unauthenticated attacker who can reach the coro_rpc master port can evict DISK replicas across all tenants. Objects whose only remaining replica is on disk are then deleted, which causes data loss.
Affected
- kvcache-ai Mooncake Store (Python package mooncake-transfer-engine)
- All versions through 0.3.13.post1 according to the CNA range
Fixed in
Unknown. No fixed version has been confirmed.
Workaround
No vendor workaround published.
- Restrict network access to the coro_rpc master port to trusted Mooncake clients and nodes.
- Do not expose the master port to the internet.
Exploitation
- CISA SSVC: exploitation none, automatable yes, technical impact partial.
- Not listed as known exploited (checked only via secondary sites).
- No public proof of concept found; this does not rule one out.
Our recommendation
- Check whether Mooncake Store or mooncake-transfer-engine is deployed, and compare the version with 0.3.13.post1.
- Restrict access to the coro_rpc master port with firewall rules or network segmentation.
- Back up data that depends on disk-tier replicas, because lost replicas cannot be restored from Mooncake itself.
- Monitor the GitHub issue and the vendor for a fix and apply it as soon as it is available.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- VulnCheck advisory: Mooncake Store missing authorization via EvictDiskReplica RPC www.vulncheck.com
- GitHub issue kvcache-ai/Mooncake #4478 github.com
- Mooncake master_service.cpp (affected source lines) github.com
- Mooncake GitHub repository github.com
- CVE record CVE-2026-106040 (Vulners, CNA data) vulners.com
- OSV entry CVE-2026-106040 osv.dev
- Vulners CVE-2026-106040 vulners.com
- Strix CVE-2026-106040 www.strix.ai
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 31 Oct 2026, 22:18.
Original description (NVD)
Mooncake Store master through 0.3.13.post1 contains a missing authorization vulnerability that allows unauthenticated attackers to erase any object's disk replica via EvictDiskReplica and BatchEvictDiskReplica. Attackers reaching the coro_rpc master port can evict DISK replicas across all tenants, deleting objects whose only remaining replica is on disk.
NVD references (4)
- https://github.com/kvcache-ai/Mooncake
- https://github.com/kvcache-ai/Mooncake/blob/719735896c86b56fabec6cf3e825fb2ea640597a/mooncake-store/src/maste…
- https://github.com/kvcache-ai/Mooncake/issues/4478
- https://www.vulncheck.com/advisories/mooncake-store-through-0.3.13-post1-missing-authorization-via-evictdiskr…
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.