High severity7.5NVD Advisory· Published Oct 12, 2026· Updated Oct 12, 2026
CVE-2026-109229
CVE-2026-109229
Description
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic image loader, exhausting worker memory during decoding.
Affected products
1- Range: <=0.5.21
Patches
Vulnerability mechanics
References
4- github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/nano_nemotron_vl.pynvd
- github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.pynvd
- github.com/sgl-project/sglang/issues/43707nvd
- www.vulncheck.com/advisories/sglang-through-0.5.21-decompression-bomb-dos-via-nanonemotronvlimageprocessornvd
News mentions
0No linked articles in our index yet.