CVE-2026-92972 sgl-project CVE debrief

Who should care

Defenders and administrators using SGLang should assess exposure and prioritize remediation due to the high-severity nature of this vulnerability. SGLang users must verify their version, restrict access to the prefill bootstrap service, and monitor for suspicious activity. This vulnerability impacts SGLang operators, platform administrators, vulnerability management teams, and security teams responsible for ensuring the security and integrity of their -

Why it matters

CVE-2026-92972 is a high-severity vulnerability in SGLang that allows attackers to poison the KV transfer routing table, causing denial of service or disclosure of metadata. Defenders and administrators using SGLang should assess exposure and prioritize remediation.

• Denial of service due to redirecting decode workers to attacker-controlled endpoints
• Disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters

Technical summary

The vulnerability is caused by an unauthenticated PUT /route endpoint on the prefill bootstrap service in SGLang through 0.5.19. This allows attackers to supply arbitrary rank_ip and rank_port values to redirect decode workers to attacker-controlled endpoints, potentially causing denial of service or disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters. The vulnerability affects SGLang deployments and requires immediate attention from defenders and administrators.

Defensive priority

Defenders should prioritize verifying and remediating this vulnerability, especially in environments using SGLang.

Recommended defensive actions

• Verify SGLang version and check for updates
• Restrict access to the prefill bootstrap service
• Monitor for suspicious activity on the KV transfer routing table
• Implement compensating controls for exposed systems
• Conduct exposure review for managed environments
• Review asset inventory for affected systems
• Track exceptions and retest remediated assets

Evidence notes

The vulnerability is described in the CVE record and NVD entry. The source references provide additional details about the vulnerability and its impact. Evidence is limited to public CVE and NVD records. Defenders should verify SGLang version and check for updates, restrict access to the prefill bootstrap service, and monitor for suspicious activity on the KV transfer routing table. No additional evidence is available beyond CVE and NVD records.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.