Medium severity6.5NVD Advisory· Published Oct 19, 2026· Updated Oct 19, 2026
CVE-2026-112269
CVE-2026-112269
Description
SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer frames to exhaust Prefill memory until the scheduler is OOM-killed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=0.5.22
Patches
Vulnerability mechanics
References
5- github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/utils.pynvd
- github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.pynvd
- github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.pynvd
- github.com/sgl-project/sglang/issues/45012nvd
- www.vulncheck.com/advisories/sglang-through-0.5.22-memory-exhaustion-via-unauthenticated-mooncake-decode-registrationsnvd
News mentions
0No linked articles in our index yet.