CVE-2026-110807 sgl-project CVE debrief

Who should care

Defenders responsible for systems using SGLang, particularly those exposed to remote attacks, should assess exposure and prioritize verification and potential remediation. Defenders need to verify affected versions and assess exposure. The vulnerability allows for remote denial of service attacks, impacting system availability. Public exploits are available, increasing the urgency for remediation. Remediation priority is elevated due to the potential for

Why it matters

CVE-2026-110807 is a denial of service vulnerability in sgl-project SGLang up to 0.5.19, allowing remote attacks. Defenders should verify versions, assess exposure, and prioritize remediation due to public exploits.

• Remote denial of service attacks are possible, impacting system availability.
• Defenders need to verify affected versions and assess exposure.
• Public exploits are available, increasing the urgency for remediation.
• Remediation priority is elevated due to the potential for exploitation.

Technical summary

The vulnerability is located in the io_struct.py file of the SGLang generate Endpoint, specifically in the handling of the session_params argument. This allows for remote denial of service attacks. The vulnerability affects sgl-project SGLang up to 0.5.19. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet. Defenders should verify versions, assess exposure, and prioritize remediation due to public exploits.

Defensive priority

Defenders should prioritize verifying the affected versions of SGLang and assessing exposure, as the vulnerability allows for remote denial of service attacks.

Recommended defensive actions

• Verify the version of SGLang being used and check if it is within the affected range (up to 0.5.19).
• Assess exposure to the vulnerability, particularly in remote attack scenarios.
• Monitor for public exploits and adjust defensive priorities accordingly.
• Consider compensating controls or workarounds until an official patch is available.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE record and source item provide details about the vulnerability, including its description, affected versions, and references to external sources. The vulnerability is located in the io_struct.py file of the SGLang generate Endpoint, specifically in the handling of the session_params argument. This allows for remote denial of service attacks. The project was informed of the problem early through an issue report but has not responded yet. The exploit has been made available to the public and could be used for attacks. Defenders

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.