Sgl-Project Sglang
22 CVEs affecting Sgl-Project Sglang. Latest disclosed: 2026-10-19. Critical: 0, High: 10.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-92972 | High | 8.6 | 2026-09-17 | SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attack… |
CVE-2026-111391 | High | 8.1 | 2026-10-16 | SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the… |
CVE-2026-112082 | High | 7.5 | 2026-10-19 | A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt… |
CVE-2026-109229 | High | 7.5 | 2026-10-12 | SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIX… |
CVE-2026-109228 | High | 7.5 | 2026-10-12 | SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps… |
CVE-2026-109227 | High | 7.5 | 2026-10-12 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution bef… |
CVE-2026-109226 | High | 7.5 | 2026-10-12 | SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly co… |
CVE-2026-109225 | High | 7.5 | 2026-10-12 | SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversiz… |
CVE-2026-102634 | High | 7.5 | 2026-09-29 | SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer b… |
CVE-2026-93688 | High | 7.5 | 2026-09-18 | SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded trans… |
CVE-2026-112270 | Medium | 6.5 | 2026-10-19 | SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that lets unaut… |
CVE-2026-112269 | Medium | 6.5 | 2026-10-19 | SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowi… |
CVE-2026-112267 | Medium | 6.5 | 2026-10-19 | SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigg… |
CVE-2026-112266 | Medium | 5.9 | 2026-10-19 | SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a sho… |
CVE-2026-93838 | Medium | 5.9 | 2026-09-18 | SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_R… |
CVE-2026-7669 | Medium | 5.6 | 2026-05-02 | A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of the file python/sglang/srt/utils/hf_transformers_util… |
CVE-2026-112083 | Medium | 5.3 | 2026-10-19 | A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file pyt… |
CVE-2026-111392 | Medium | 4.8 | 2026-10-16 | SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across… |
CVE-2026-110809 | Medium | 4.3 | 2026-10-15 | A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sgl… |
CVE-2026-110807 | Medium | 4.3 | 2026-10-14 | A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/man… |