CVE-2026-109225 — SGLang through 0.5.21 Memory Exhaustion DoS via /v1/audio/transcriptions Upload
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/au…
Published: 2026-10-12 · CVSS: 8.7 · CVSS 4.0
SGLang through 0.5.21 contains an unbounded memory allocation vulnerability that allows unauthenticated remote attackers to exhaust memory by uploading oversized files to /v1/audio/transcriptions. Attackers can send concurrent large multipart uploads, which are fully read into memory before validation, to crash the HTTP/tokenizer worker and deny service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7