CVE-2026-109229

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.22

Description A denial of service issue exists where the NanoNemotronVLImageProcessor disables Pillow decompression bomb protection process-wide by setting Image.MAX IMAGE PIXELS to None. This allows remote attackers to submit small, highly compressed images with massive dimensions to the generic image loader, leading to worker memory exhaustion during the decoding process. A decompression bomb is a malicious archive or image file designed to crash a system by expanding to an enormous size when decompressed.

Recommendations Update to version 0.5.22 or later.