CVE-2026-112269 Details

A denial-of-service vulnerability has been identified in SGLang versions through 0.5.22, specifically within the Mooncake disaggregation backend. The issue arises because the application accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket. This vulnerability allows network-adjacent attackers to send numerous registration messages, each with unique mooncake_session_id values and large nested-buffer frames. As a result, the Prefill memory is exhausted, causing the scheduler to be out-of-memory killed. The vulnerability exploitation can be reproduced by sending a high volume of these registration messages, which can be automated with a script.