CVE-2026-93838highCWE-770

CVE-2026-93838: falha de alta gravidade em sgl-project sglang

SGLang through 0.5.20 Unbounded Memory Allocation via STAGING_REQ chunk_idx

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar sglang

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8.2epss 0.7%
SGLang versions through 0.5.20 contain an unbounded memory allocation vulnerability in handle_staging_req() that fails to validate chunk_idx from ZMQ STAGING_REQ frames in prefill/decode disaggregation deployments. Attackers with access to the decode engine's internal ZMQ rank port can send a frame with an extremely large chunk_idx value, causing the scheduler to allocate memory until the system runs out and terminates the process.
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Produtos afetados
sgl-project · sglang
CVEs relacionadas — sgl-project sglang

No mesmo produto, das mais perigosas para as menos.

CVE-2026-93688HIGHSGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_roomEPSS 0.7%CVE-2026-102634HIGHSGLang through 0.5.20 Denial of Service via Duplicate bootstrap_roomEPSS 0.6%CVE-2026-109226HIGHSGLang through 0.5.21 Audio Decompression Amplification via load_audioEPSS 0.6%CVE-2026-109229HIGHSGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessorEPSS 0.5%CVE-2026-109227HIGHSGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video PreprocessingEPSS 0.5%CVE-2026-109228HIGHSGLang through 0.5.21 Resource Budget Bypass via GLM-V Video ParametersEPSS 0.5%