Live › vulnerability › CVE-2026-112266
Go to dashboardSGLang through 0.5.22 matches client-supplied request IDs by prefix, so a short rid can match and abort other users' in-flight generation requests. An attacker can disconnect other clients' streaming /generate requests, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run SGLang as a shared inference server serving multiple API clients are exposed, since any client that can reach the /generate endpoint can abort other clients' requests. Single-user or private deployments where only trusted callers reach the server are less exposed. unknown whether a patched release exists in the sources.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering prefix-matching abort logic that terminates all other clients' requests.
This page as .md · .json · in your agent: get_signal("CVE-2026-112266")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.