CVE-2026-111392

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.22

Description The software trusts caller-supplied mm hashes values as the multimodal prefix-cache key. This allows remote attackers to poison cached KV (Key-Value) entries across requests. By sending a different image under a known or predicted hash via the '/generate' endpoint, an attacker can disclose the image content of another request or corrupt the responses received by victims.

Recommendations Update to version 0.5.22 or later. Avoid using the mm hashes parameter in the '/generate' endpoint until the update is applied.