CVE-2026-112267— SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker
Quick assessment
Affected
sgl-project sglang
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SGLang 在 0.5.22 及更早版本中，当处于预填充/解码分离（prefill/decode disaggregation）模式时，存在服务端请求伪造（SSRF）漏洞。该漏洞允许未认证的攻击者通过客户端提供的 和 字段触发出站请求。攻击者可向解码工作节点（Decode worker）的 接口发送精心构造的请求，从而探测内部主机和端口，并阻塞共享调度器循环，导致其他推理请求被延迟。
Possible ATT&CK Techniques 2 AI
T1046 · Network Service Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-112267
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker
Source: CVE Program / CVE List V5
Vulnerability Description
SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstrap_host and bootstrap_port fields. Attackers sending crafted requests to the Decode worker's /generate endpoint can probe internal hosts and ports and block the shared scheduler loop, delaying other inference requests.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| sgl-project | sglang | 0 ~ 0.5.22 | - |
|
II. Public POCs for CVE-2026-112267
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-112267
请登录查看更多情报信息。
Other References for CVE-2026-112267 (4)
-
https://github.com/sgl-project/sglang/issues/45008 issue-tracking
Same Patch Batch · sgl-project · 2026-10-19 · 7 CVEs total
| CVE-2026-112082 | 7.5 HIGH | sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler |
| CVE-2026-112270 | 6.5 MEDIUM | SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx |
| CVE-2026-112269 | 6.5 MEDIUM | SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations |
| CVE-2026-112268 | 6.3 MEDIUM | sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes |
| CVE-2026-112266 | 5.9 MEDIUM | SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching |
| CVE-2026-112083 | 5.3 MEDIUM | sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remot |
IV. Related Vulnerabilities
Same product: sglang
-
CVE-2026-112270
SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING -
CVE-2026-112269
SGLang through 0.5.22 Memory Exhaustion via Unauthenticated -
CVE-2026-112266
SGLang through 0.5.22 Cross-Request Abort via rid Prefix Mat -
CVE-2026-112083
sgl-project SGLang Weight Exporter weight_exporter.py Weight -
CVE-2026-112082
sgl-project SGLang Expert-Distribution Recording Endpoint ex
Same vendor: sgl-project
-
CVE-2026-112270
SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING -
CVE-2026-112269
SGLang through 0.5.22 Memory Exhaustion via Unauthenticated -
CVE-2026-112268
sglang-router through 0.3.2 Authorization Bypass via Mesh HA -
CVE-2026-112266
SGLang through 0.5.22 Cross-Request Abort via rid Prefix Mat -
CVE-2026-112083
sgl-project SGLang Weight Exporter weight_exporter.py Weight
Same weakness: CWE-918
-
CVE-2026-112363
Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate. -
CVE-2026-112308
crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool -
CVE-2026-112288
Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Reb -
CVE-2026-111936
Sigma File Manager through 2.2.0 SSRF via Extension Download -
CVE-2026-111899
KitchenOwl through 0.7.10 SSRF via Recipe Import scrapeKitch
V. Comments for CVE-2026-112267
No comments yet