Vulnerability · Published Oct 12, 2026 · Assigned by VulnCheck

CVE-2026-109226SGLang through 0.5.21 Audio Decompression Amplification via load_audio

High 7.5

In plain English

A high-severity security flaw in sglang from sgl-project. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)7.5High

Exploit odds (30 days)0.6%top 53.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SGLang through 0.5.21 contains a decompression amplification vulnerability in load_audio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audio_url or audio_data inputs that expand into massive PCM buffers, exhausting worker memory and CPU for denial of service.

Affected products (as reported)

Vendor	Product	Versions
sgl-project	sglang	0 – through 0.5.21

Weakness: CWE-409 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

GitHub Issue #43708 issue-tracking
https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1783 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/utils/common.py#L1801-L1803 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/audio_from_video.py#L128 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.21/python/sglang/srt/multimodal/processors/base_processor.py#L996 technical-description
https://github.com/sgl-project/sglang product
VulnCheck Advisory: SGLang through 0.5.21 Audio Decompression Amplification via load_audio third-party-advisory