CVE-2026-112266 — SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controll…
Published: 2026-10-19 · CVSS: 8.2 · CVSS 4.0
SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering prefix-matching abort logic that terminates all other clients' requests.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7