{"id":"CVE-2026-112267","title":"SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker","summary":"SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fie…","severity":"medium","cvss":6.5,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","cvssSource":"cna","cwe":["CWE-918"],"vendor":"sgl-project","product":"sglang","affected":["sglang <= 0.5.22"],"published":"2026-10-19","updated":"2026-10-19","sourceUpdated":"2026-10-19T13:55:16.522Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-112267","references":[{"url":"https://github.com/sgl-project/sglang/issues/45008"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/conn.py#L1157-L1181"},{"url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/decode.py#L1150-L1175"},{"url":"https://www.vulncheck.com/advisories/sglang-through-0.5.22-ssrf-via-bootstrap-host-and-bootstrap-port-on-decode-worker","label":"VulnCheck Advisory: SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker"}],"tags":["cve.org"],"ingestedAt":"2026-10-19T14:30:01.076Z","slug":"CVE-2026-112267","body":"## Overview\n\nSGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker's /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.\n\n## Affected\n\n- `sglang <= 0.5.22`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":36,"depthScoreParts":{"impact":35.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}