Live › vulnerability › CVE-2026-112269
Go to dashboardSGLang through 0.5.22 with the Mooncake disaggregation backend accepts decode registration messages on the Prefill rank ZMQ PULL socket without authentication. A network-adjacent attacker can send many registrations with unique session IDs and large buffer frames until Prefill memory is exhausted and the scheduler is OOM-killed.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Deployments of SGLang through 0.5.22 that use the Mooncake disaggregation backend, where prefill and decode run as separate ranks and the Prefill ZMQ PULL socket accepts registrations. Single-process SGLang deployments or those not using Mooncake disaggregation are not described as affected. Teams that can keep the Prefill socket off untrusted networks have much less exposure.
No product ranges from the sources yet.
pip show sglang and compare it to the fixed release, which the sources do not name.mooncake in the server launch flags or config).ss -ltnp and firewall rules.0.5.22 once a fixed release is available; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer frames to exhaust Prefill memory until the scheduler is OOM-killed.
This page as .md · .json · in your agent: get_signal("CVE-2026-112269")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.