CVE-2026-92972 — SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the …
Published: 2026-09-17 · CVSS: 8.8 · CVSS 4.0
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rank_ip and rank_port values to redirect decode workers to attacker-controlled endpoints, causing denial of service or disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7