Live › vulnerability › CVE-2026-112083
Go to dashboardSGLang's /send_weights_to_remote_instance endpoint crashes the whole server with one request if no weight-send group was initialised first. The code subscripts a dict (KeyError) instead of using .get(), so the scheduler process dies. Without --api-key anyone who can reach the port can trigger it. A PoC is public; no exploitation reported.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Anyone running SGLang 0.5.0 to 0.5.19 whose HTTP server is reachable by people you do not trust. The route is admin-optional, so a server started without --api-key accepts the request from anyone and one request takes the whole server down. The endpoint is registered in the default HTTP server; no special flag is needed. Servers with --api-key set, or on a private network, can skip this.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| sglang | pypi | >= 0.5.0, <= 0.5.19 | – |
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
This page as .md · .json · in your agent: get_signal("CVE-2026-112083")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.