CVE-2026-94570

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.20

Description SGLang is subject to a denial of service issue due to missing input validation for AUX DATA ZeroMQ control messages within the Decode worker. An unauthenticated remote attacker with network access to the Decode control PULL socket can terminate the Decode control thread, resulting in a denial of service for the target server.

Recommendations Update to version 0.5.20.