sglang-router vulnerabilities

CVEs whose affected-version data names the sglang-router package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112268Medium· 6.3

today

sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes

sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/* endpoints skip control-plane Admin role checks…

▾ Sunlitsgl-project · sglang-routervia CVEORG