CVE-2026-112267

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.23

Description In prefill/decode disaggregation mode, a server-side request forgery issue exists that allows unauthenticated attackers to trigger outbound requests. By sending crafted requests to the '/generate' endpoint of the Decode worker, attackers can use the bootstrap host and bootstrap port fields to probe internal hosts and ports. This action can block the shared scheduler loop, resulting in delays for other inference requests.

Recommendations Update SGLang to version 0.5.23 or later.