HIGH 8.7 NVD
CVE-2026-93688
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transf
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.
References
- https://github.com/sgl-project/sglang
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/disaggregation/moonca
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/disaggregation/moonca
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/managers/io_struct.py
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/managers/scheduler.py
This high severity vulnerability with a CVSS score of 8.7 was published on 2026-09-18 via NVD.
vulnfeed aggregates 14649 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.