CVE-2026-112268

Name of the Vulnerable Software and Affected Versions sglang-router (sgl-model-gateway) versions prior to 0.3.3

Description An authorization bypass exists where holders of the data-plane API key can access mesh High Availability (HA) management routes. This occurs because the /ha/* endpoints skip control-plane Admin role checks. An attacker can read cluster topology, write gossiped configuration, modify global rate limits, and use the POST /ha/shutdown endpoint to silently dissolve HA coordination.

Recommendations Update sglang-router (sgl-model-gateway) to version 0.3.3 or later. Restrict access to the /ha/* endpoints to prevent unauthorized access to HA management routes.