These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been [truncated]
A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request t [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-10-16T17:38:44.867Z and has not been modified since then. SGLang through 0.5.21 is vulnerable to KV Cache Poisoning via mm_hashes in /generate, allowing remote attackers to poison cached KV entries across requests. This could lead to disclosure of sensitive image content or corruption of victim respons [truncated]
CVE-2026-111391 is a critical vulnerability in SGLang versions 0.5.10 through 0.5.22, allowing remote code injection via the /dumper/configure endpoint. This vulnerability has a CVSS score of 9.2 and is considered critical. The vulnerability is caused by a code injection issue in the _evaluate_filter() function, which allows attackers to execute Python code by escaping the eval() sandbox. The issue is tri [truncated]
A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used [truncated]
CVE-2026-109229 is a denial of service vulnerability in SGLang through version 0.5.21. The vulnerability disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic image loader, exhausting worker memory during decoding.
CVE-2026-109228 is a high-severity vulnerability in SGLang, a project that allows remote attackers to bypass resource budget limits via GLM-V video parameters. The vulnerability has a CVSS score of 8.7 and can be exploited by supplying specially crafted fps, max_frames, max_tokens_per_frame, and max_image_tokens values in the video_url object, potentially leading to a denial-of-service (DoS) attack by exh [truncated]
A memory exhaustion denial-of-service vulnerability exists in SGLang through version 0.5.21. The issue arises from unbounded memory allocation in the preprocess_video function of qwen_vl.py, specifically when decoding frames at full source resolution before applying max_pixels limits. This allows remote attackers to submit high-resolution videos to /v1/chat/completions on Qwen-VL deployments. Consequently [truncated]
CVE-2026-109226: SGLang through 0.5.21 Audio Decompression Amplification via load_audio allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audio_url or audio_data inputs that expand into massive PCM buffers, exhausting worker memory and CPU for denial of service.
CVE-2026-109225 is a high-severity vulnerability in SGLang versions up to 0.5.21, allowing unauthenticated remote attackers to cause a denial of service by exhausting memory through large file uploads to /v1/audio/transcriptions. Defenders should assess exposure, prioritize remediation, and verify system inventory. The vulnerability is caused by unbounded memory allocation, which can be triggered by concu [truncated]
A vulnerability was found in sgl-project sglang up to 0.5.21, affecting the server_info function in python/sglang/srt/entrypoints/http_server.py. This issue allows for cleartext transmission of sensitive information via manipulation of the api_key argument in the HTTP Endpoint. The attack can be launched remotely and is considered difficult to exploit. The exploit has been disclosed publicly and a pull re [truncated]
CVE-2026-92972 is a high-severity vulnerability in SGLang through 0.5.19 that allows attackers to poison the KV transfer routing table via an unauthenticated PUT /route endpoint, potentially causing denial of service or disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters. This vulnerability affects SGLang deployments and requires immediate attention fro [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-30T19:17:08.993Z and has not been modified since then. SGLang contains a model weight exfiltration vulnerability when no API keys are configured, allowing remote attackers to trigger distributed weight broadcasting and data transfer to exfiltrate model weights. Organizations using SGLang should veri [truncated]
AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-07-30T19:17:08.893Z and has not been modified since then. The NVD entry is currently Awaiting Analysis. This CVE-2026-15977 vulnerability in SGLang's /server_info endpoint returns sensitive information, including API keys and SSL keyfile details, when accessed with the --admin-api-key configured. Organ [truncated]
