CVE-2026-112083 - Vulnerability Details

- sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service

Description

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.

Published: 2026-10-19

Score: 6.9 Medium

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

A flaw in the WeightExporter.send_weights_to_remote_instance method of sgl-project's SGLang lets an attacker craft a group_name argument that causes the exporter to terminate or become stuck, rendering the component unavailable. The weakness is a missing resource cleanup or bounds check, categorized as CWE-404, and results in a remote denial of service when the manipulated argument is processed.

Affected Systems

The vulnerability affects the SGLang project by sgl-project, specifically versions up to 0.5.19. It is located in the weight_exporter.py file within the Weight Exporter component and impacts any deployment that enables remote weight exporting.

Risk and Exploitability

The CVSS score of 6.9 signals a medium‑high severity. EPSS data is not available and the issue is not currently listed in the CISA KEV catalog, but an exploit is publicly released and can be launched remotely without credentials. An attacker can trigger the denial of service from anywhere by sending a crafted request to a remote instance, making the flaw both actionable and potentially disruptive.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

sgl-project

SGLang

affected

Version	Status	Constraints
`0.5.0`	affected	—
`0.5.1`	affected	—
`0.5.2`	affected	—
`0.5.3`	affected	—
`0.5.4`	affected	—
`0.5.5`	affected	—
`0.5.6`	affected	—
`0.5.7`	affected	—
`0.5.8`	affected	—
`0.5.9`	affected	—
`0.5.10`	affected	—
`0.5.11`	affected	—
`0.5.12`	affected	—
`0.5.13`	affected	—
`0.5.14`	affected	—
`0.5.15`	affected	—
`0.5.16`	affected	—
`0.5.17`	affected	—
`0.5.18`	affected	—
`0.5.19`	affected	—

No data.

No data available yet.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Apply the vendor-supplied patch once the pull request is merged and upgrade SGLang to a version newer than 0.5.19.
Disable the remote weight export feature if it is not required for your environment to stop the attack surface.
Add validation or sanitization for the group_name parameter, or enforce rate limiting on the send_weights_to_remote_instance endpoint to mitigate repeated denial of service attempts.

Generated by OpenCVE AI on October 19, 2026 at 07:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

This CVE is not in the KEV list.

The EPSS score is 0.00419.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://github.com/sgl-project/sglang/
https://github.com/sgl-project/sglang/issues/42073
https://github.com/sgl-project/sglang/pull/44314
https://vuldb.com/cve/CVE-2026-112083
https://vuldb.com/submit/1009919
https://vuldb.com/vuln/421762
https://vuldb.com/vuln/421762/cti

History

Mon, 19 Oct 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Title		sgl-project SGLang Weight Exporter weight_exporter.py WeightExporter.send_weights_to_remote_instance denial of service
First Time appeared		Sgl-project Sgl-project sglang
Weaknesses		CWE-404
CPEs		cpe:2.3:a:sgl-project:sglang::::::::
Vendors & Products		Sgl-project Sgl-project sglang
References		https://github.com/sgl-project/sglang/ https://github.com/sgl-project/sglang/issues/42073 https://github.com/sgl-project/sglang/pull/44314 https://vuldb.com/cve/CVE-2026-112083 https://vuldb.com/submit/1009919 https://vuldb.com/vuln/421762 https://vuldb.com/vuln/421762/cti
Metrics		cvssV2_0 `{'score': 5, 'vector': 'AV:N/AC:L/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:C'}` cvssV3_0 `{'score': 5.3, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'}` cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P'}`

Subscriptions

Sgl-project Sglang

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2026-10-19T05:45:18.578Z

Updated: 2026-10-19T05:45:18.578Z

Reserved: 2026-10-18T14:26:48.148Z

Link: CVE-2026-112083

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2026-10-19T06:17:23.377

Modified: 2026-10-19T06:17:23.600

Link: CVE-2026-112083

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-10-19T07:30:07Z

Weaknesses

CWE-404
Improper Resource Shutdown or Release

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact Low

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Partial

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object