Vulnerability · Published Oct 19, 2026 · Assigned by VulnCheck

CVE-2026-112269SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations

Medium 6.5

In plain English

A medium-severity resource allocation without limits in sglang from sgl-project. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.5%top 57.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SGLang through 0.5.22 with the Mooncake disaggregation backend accepts unauthenticated decode registration messages on the Prefill rank ZMQ PULL socket, allowing denial of service. Network-adjacent attackers can send many registrations with unique mooncake_session_id values and large nested-buffer frames to exhaust Prefill memory until the scheduler is OOM-killed.

Affected products (as reported)

Vendor	Product	Versions
sgl-project	sglang	0 – through 0.5.22

Weakness: CWE-770 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/sgl-project/sglang/issues/45012 issue-tracking
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L2885-L2935 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/mooncake/conn.py#L889-L909 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/disaggregation/common/utils.py#L47-L69 technical-description
VulnCheck Advisory: SGLang through 0.5.22 Memory Exhaustion via Unauthenticated Mooncake Decode Registrations third-party-advisory