CVE-2026-111392 — SGLang through 0.5.21 KV Cache Poisoning via mm_hashes in /generate
SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attacker…
Published: 2026-10-16 · CVSS: 6.3 · CVSS 4.0
SGLang through 0.5.21 trusts caller-supplied mm_hashes values as the multimodal prefix-cache key, allowing remote attackers to poison cached KV entries across requests. Attackers can send a different image under a known or predicted hash via /generate to disclose another request's image content or corrupt victims' responses.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7