Medium severity5.9NVD Advisory· Published Sep 18, 2026· Updated Sep 22, 2026
CVE-2026-93838
CVE-2026-93838
Description
SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame with an extremely large chunk_idx value, causing the scheduler to allocate memory until the system runs out and terminates the process.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=0.5.20
Patches
Vulnerability mechanics
References
5- github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/conn.pynvd
- github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/staging_handler.pynvd
- github.com/sgl-project/sglang/blob/v0.5.20/python/sglang/srt/disaggregation/common/staging_handler.pynvd
- github.com/sgl-project/sglang/issues/39764nvd
- www.vulncheck.com/advisories/sglang-through-0.5.20-unbounded-memory-allocation-via-staging-req-chunk-idxnvd
News mentions
0No linked articles in our index yet.