Sgl-project vulnerabilities
We track 10 vulnerabilities in Sgl-project products. 10 are rated high or critical, and none are known to be exploited. The most recent was published on October 19, 2026.
Latest Sgl-project vulnerabilities
- 7.5 High severity
SGLang: Improper Resource Shutdown or Release
A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulati
- 8.1 High severity
sglang: Improper Neutralization of Directives in Dynamically Evaluated Code
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the u
- 7.5 High severity
sglang: Improper Handling of Highly Compressed Data (Data Amplification)
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed ima
- 7.5 High severity
sglang: Allocation of Resources Without Limits or Throttling
SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_tokens_per_frame and max_image_tokens in the video_url object. Attackers can set thes
- 7.5 High severity
sglang: Allocation of Resources Without Limits or Throttling
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability in preprocess_video in qwen_vl.py that decodes frames at full source resolution before applying max_pixels limits. Remote attackers can submit high-resolution videos to /v1/chat/comple
- 7.5 High severity
sglang: Improper Handling of Highly Compressed Data (Data Amplification)
SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded sil
- 7.5 High severity
sglang: Allocation of Resources Without Limits or Throttling
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions. Attackers can send concurrent large multipart uploads, which ar
- 7.5 High severity
sglang: Use of Multiple Resources with Duplicate Identifier
SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values t
- 7.5 High severity
sglang: Allocation of Resources Without Limits or Throttling
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint
- 8.6 High severity
sglang: Missing Authentication for Critical Functionality
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rank_ip and rank_port val