Technical impact
SGLang versions up to 0.5.21 contain a resource budget bypass that lets attackers supply arbitrary high values for fps, max_frames, max_tokens_per_frame, and max_image_tokens in the video_url object. When these values are set beyond normal limits, the GLM‑V video processing module decodes every frame at full resolution, consuming worker memory until the process fails and the service becomes unavailable. This flaw satisfies the definition of resource exhaustion (CWE-770).
Affected Systems
The affected product is SGLang from the sgl-project. Versions up to and including 0.5.21 are impacted; any release newer than 0.5.21 is considered unimpacted.
Risk and Exploitability
The CVSS score of 8.7 indicates a high severity level. The EPSS score is not available, so the current exploitation probability cannot be quantified, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, through an endpoint that accepts a video_url payload; attackers can trigger the exploit by sending a crafted request over the network. With this vector, an adversary can exhaust memory resources and cause a denial of service on the affected instance.
