Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-112269— SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations

Quick assessment

Affected
sgl-project sglang
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在版本 0.5.22 及之前的 SGLang 中，若启用了 Mooncake 解耦后端，其 Prefill 节点上的 ZMQ PULL 套接字会接受未经身份验证的解码注册消息，从而导致拒绝服务（DoS）漏洞。位于网络相邻位置的攻击者可以发送大量携带唯一 值及大型嵌套缓冲区帧的注册请求，耗尽 Prefill 节点的内存，直至调度器因内存不足（OOM）被系统终止。

CVSS 6.5 · Medium

Possible ATT&CK Techniques 1 AI

T1499.003 · Application Exhaustion Flood
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-112269

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations
Source: CVE Program / CVE List V5
Vulnerability Description
SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer frames to exhaust Prefill memory until the scheduler is OOM-killed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不加限制或调节的资源分配
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
sgl-project sglang 0 ~ 0.5.22 -

II. Public POCs for CVE-2026-112269

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-112269

请登录查看更多情报信息。

Other References for CVE-2026-112269 (5)

Same Patch Batch · sgl-project · 2026-10-19 · 7 CVEs total

CVE-2026-112082 7.5 HIGH sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler
CVE-2026-112267 6.5 MEDIUM SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker
CVE-2026-112270 6.5 MEDIUM SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx
CVE-2026-112268 6.3 MEDIUM sglang-router through 0.3.2 Authorization Bypass via Mesh HA Management Routes
CVE-2026-112266 5.9 MEDIUM SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
CVE-2026-112083 5.3 MEDIUM sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remot

IV. Related Vulnerabilities

Same product: sglang
Same vendor: sgl-project
Same weakness: CWE-770

V. Comments for CVE-2026-112269

No comments yet

Leave a comment