CVE-2026-112270

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.23

Description An uncontrolled memory allocation issue exists in the Mooncake disaggregation backend within the handle staging rsp() function. Unauthenticated network-adjacent attackers can exhaust Prefill memory by obtaining the rank address from the '/route' endpoint and sending STAGING RSP messages containing excessively large chunk idx values under new room IDs. This action can lead to the scheduler being OOM-killed, which refers to an Out-Of-Memory state where the operating system terminates the process to reclaim memory.

Recommendations Update SGLang to version 0.5.23 or later. As a temporary mitigation, restrict access to the '/route' endpoint to prevent unauthorized users from obtaining rank addresses.