The vulnerability in SGLang's /v1/chat/completions endpoint arises from improper sanitization of the image_url parameter, leading to SSRF and local file read capabilities. This allows an attacker to make unauthorized requests to internal resources and read sensitive files, potentially exposing internal metadata and secrets. There is no CVSS score or detailed vendor advisory available, and no patch or remediation information is provided. The service is not cloud-hosted, so remediation responsibility lies with the user or vendor.

An attacker exploiting this vulnerability could access internal metadata, secrets, and internal services that should not be exposed externally. This can lead to information disclosure and potentially further compromise of the affected system. No evidence of active exploitation is currently known.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should consider restricting access to the vulnerable endpoint, validating and sanitizing input parameters such as image_url, and monitoring for suspicious activity related to SSRF attempts.