CVE-2026-112270 Details
Description
SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handle_staging_rsp() that lets unauthenticated network-adjacent attackers exhaust Prefill memory. Attackers can obtain the rank address from the /route endpoint and send STAGING_RSP messages with huge chunk_idx values under fresh room IDs, causing the scheduler to be OOM-killed.
A vulnerability allowing uncontrolled memory allocation has been identified in SGLang versions through 0.5.22, specifically within the Mooncake disaggregation backend. This vulnerability arises in the function handle_staging_rsp(), where unauthenticated, network-adjacent attackers can send STAGING_RSP messages with excessively large chunk_idx values. By doing so, they can exhaust Prefill memory, leading to a denial-of-service condition. The attack involves obtaining the rank address from the /route endpoint and using fresh room IDs to cause the scheduler to be terminated by the out-of-memory killer.
A pull request is available that drops STAGING_RSP messages for chunks that were not requested by the engine.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-770 | Allocation of Resources Without Limits or Throttling | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| SGLang | <= 0.5.22 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |