CVE-2026-110809 Details
Description
A security vulnerability has been detected in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
A denial-of-service vulnerability has been identified in SGL Project SGLang versions through 0.5.19. The issue arises in the Session.create_req function within the session_controller.py file. When the session_params.replace option is set to true without a corresponding request ID, the server crashes. This occurs because the 'clear' method deletes items from the request node dictionary while it is being iterated over, leading to a runtime error. The server disconnection can be observed as a 'dictionary changed size during iteration' error, causing a SIGQUIT signal that terminates the server process. This vulnerability can be exploited remotely.
A pull request to fix this vulnerability has been submitted and is awaiting acceptance.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 15, 2026CISA-ADP
Assessed Oct 15, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/Yunzez/dbd254603fa2bc74358cb3647423d0ec#file-repro_sglang_session_replace_crash-py | [email protected] | Exploit |
| https://github.com/sgl-project/sglang/ | [email protected] | Vendor |
| https://github.com/sgl-project/sglang/issues/41470 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/sgl-project/sglang/pull/41483 | [email protected] | Issue TrackingVendor |
| https://vuldb.com/cve/CVE-2026-110809 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1004356 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/420279 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/420279/cti | [email protected] | Content Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-404 | Improper Resource Shutdown or Release | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| sgl-project SGLang | <= 0.5.19 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | CISA-ADP |
| Oct 15, 2026 | New CVE Received | [email protected] |