Threats affecting pkg:github/sgl-project/sglang

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

CVE-2026-110809 is a denial of service vulnerability in sgl-project SGLang affecting versions 0.5.0 through 0.5.19. The flaw exists in the Session.create_req function within the Session Cleanup component. The vulnerability can be exploited remotely without user interaction and requires low privileges. A public exploit is available, but a fix is pending acceptance of a pull request.

CVE-2026-105245 is a medium severity vulnerability in sgl-project sglang up to version 0.5.21. It involves cleartext transmission of sensitive information via the api_key argument in the HTTP Endpoint component's server_info function. The vulnerability can be exploited remotely but requires a high level of attack complexity. A fix has been developed but is pending acceptance in a pull request.

CVE-2026-92972 is a high-severity vulnerability in SGLang up to version 0.5.19. It involves a missing authentication check on a critical PUT /route endpoint in the prefill bootstrap service when operating in decode disaggregation mode. This flaw allows unauthenticated attackers to poison the key-value transfer routing table by supplying arbitrary rank_ip and rank_port values. Exploitation can lead to denial of service or disclosure of sensitive metadata such as session identifiers and tensor-parallel topology parameters.

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.