CVE-2026-112267Medium· 6.5▾ SunlitSGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fie…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker's /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.
sglang <= 0.5.22Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-112270Medium· 6.5SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx
CVE-2026-112269Medium· 6.5SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations
CVE-2026-112266Medium· 5.9SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
CVE-2026-112083Medium· 5.3sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service
CVE-2026-112082High· 7.5sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service
CVE-2026-111392Medium· 4.8SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate