CVE-2026-110807 - Vulnerability Details

- sgl-project SGLang generate Endpoint io_struct.py denial of service

Description

A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Published: 2026-10-14

Score: 5.3 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

An unknown functionality in the generate Endpoint within python/sglang/srt/managers/io_struct.py can be manipulated through the session_params argument, resulting in a denial of service. The vulnerability is classified as CWE‑404 and is reported to be exploitable remotely with publicly available exploits. The CVSS score of 5.3 indicates a moderate severity, with the potential to disrupt service availability for affected users.

Affected Systems

The flaw affects the sgl‑project SGLang package up to version 0.5.19. The specific component involved is the generate Endpoint implementation in the file python/sglang/srt/managers/io_struct.py. No precise version updates are listed, so any installation of SGLang at or below 0.5.19 is potentially vulnerable.

Risk and Exploitability

The CVSS score of 5.3 reflects moderate risk, and no EPSS data is currently available. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is inferred to be remote, leveraging crafted session_params to cause an endpoint crash. While the presence of public exploits indicates availability, the lack of a patch or workaround increases the need for proactive monitoring and mitigations.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

sgl-project

SGLang

affected

Version	Status	Constraints
`0.5.0`	affected	—
`0.5.1`	affected	—
`0.5.2`	affected	—
`0.5.3`	affected	—
`0.5.4`	affected	—
`0.5.5`	affected	—
`0.5.6`	affected	—
`0.5.7`	affected	—
`0.5.8`	affected	—
`0.5.9`	affected	—
`0.5.10`	affected	—
`0.5.11`	affected	—
`0.5.12`	affected	—
`0.5.13`	affected	—
`0.5.14`	affected	—
`0.5.15`	affected	—
`0.5.16`	affected	—
`0.5.17`	affected	—
`0.5.18`	affected	—
`0.5.19`	affected	—

No data.

Vendor Product Confidence Versions

Sgl-project

Sglang

100%

Version	Status	Scheme	Platform
`0.5.0`	affected	semver	—
`0.5.1`	affected	semver	—
`0.5.2`	affected	semver	—
`0.5.3`	affected	semver	—
`0.5.4`	affected	semver	—
`0.5.5`	affected	semver	—
`0.5.6`	affected	semver	—
`0.5.7`	affected	semver	—
`0.5.8`	affected	semver	—
`0.5.9`	affected	semver	—
`0.5.10`	affected	semver	—
`0.5.11`	affected	semver	—
`0.5.12`	affected	semver	—
`0.5.13`	affected	semver	—
`0.5.14`	affected	semver	—
`0.5.15`	affected	semver	—
`0.5.16`	affected	semver	—
`0.5.17`	affected	semver	—
`0.5.18`	affected	semver	—
`0.5.19`	affected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Upgrade to a patched release of sgl‑project SGLang as soon as one becomes available, e.g., version 0.5.20 or later.
If immediate upgrade is not possible, restrict external access to the generate Endpoint using firewall rules or network segmentation, allowing only trusted hosts to call it.
Continuously monitor service logs for repeated crashes or abnormal session_params usage and configure alerts to detect exploitation attempts.

Generated by OpenCVE AI on October 15, 2026 at 11:55 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.0033.

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://gist.github.com/Yunzez/28820d220c52de4810fd5fb2d1dcf409#file-repro_sglang_session_params_crash-py
https://github.com/sgl-project/sglang/
https://github.com/sgl-project/sglang/issues/41467
https://github.com/sgl-project/sglang/pull/41535
https://vuldb.com/cve/CVE-2026-110807
https://vuldb.com/submit/1004351
https://vuldb.com/vuln/420278
https://vuldb.com/vuln/420278/cti

History

Thu, 15 Oct 2026 14:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Wed, 14 Oct 2026 23:15:00 +0000

Type	Values Removed	Values Added
Description		A weakness has been identified in sgl-project SGLang up to 0.5.19. Affected by this vulnerability is an unknown functionality of the file python/sglang/srt/managers/io_struct.py of the component generate Endpoint. This manipulation of the argument session_params causes denial of service. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Title		sgl-project SGLang generate Endpoint io_struct.py denial of service
First Time appeared		Sgl-project Sgl-project sglang
Weaknesses		CWE-404
CPEs		cpe:2.3:a:sgl-project:sglang::::::::
Vendors & Products		Sgl-project Sgl-project sglang
References		https://gist.github.com/Yunzez/28820d220c52de4810fd5fb2d1dcf409#file-repro_sglang_session_params_crash-py https://github.com/sgl-project/sglang/ https://github.com/sgl-project/sglang/issues/41467 https://github.com/sgl-project/sglang/pull/41535 https://vuldb.com/cve/CVE-2026-110807 https://vuldb.com/submit/1004351 https://vuldb.com/vuln/420278 https://vuldb.com/vuln/420278/cti
Metrics		cvssV2_0 `{'score': 4, 'vector': 'AV:N/AC:L/Au:S/C:N/I:N/A:P/E:POC/RL:ND/RC:C'}` cvssV3_0 `{'score': 4.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'}` cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'}` cvssV4_0 `{'score': 5.3, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Sgl-project Sglang

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-14T23:00:19.976Z

Updated: 2026-10-15T13:26:17.848Z

Reserved: 2026-10-14T18:11:44.596Z

Link: CVE-2026-110807

Vulnrichment

Updated: 2026-10-15T13:26:13.537Z

NVD

Status : Deferred

Published: 2026-10-14T23:17:22.390

Modified: 2026-10-15T14:17:20.333

Link: CVE-2026-110807

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-17T12:00:10Z

Weaknesses

CWE-404
Improper Resource Shutdown or Release

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Exploitation poc

Automatable no

Technical Impact partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object