CVE-2026-110809

Name of the Vulnerable Software and Affected Versions sgl-project SGLang versions prior to 0.5.20

Description A remote issue exists within the Session Cleanup component, specifically in the Session.create req() function located in the python/sglang/srt/session/session controller.py file. Manipulation of this function can lead to a denial of service, which occurs when a system becomes unavailable to its intended users.

Recommendations As a temporary workaround, restrict access to the Session.create req() function until a patch is available.