CVE-2026-109228 — SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_to…
Published: 2026-10-12 · CVSS: 8.7 · CVSS 4.0
SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, max_frames, max_tokens_per_frame and max_image_tokens in the video_url object. Attackers can set these values arbitrarily high so glm4v.py decodes every frame of high-resolution video at full size, exhausting worker memory and denying service.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7