Server-Side Request Forgery in SGLang Affects Users Due to Improper Input Handling

CVE-2026-112267

What is CVE-2026-112267?

SGLang, up to version 0.5.22, is affected by a server-side request forgery vulnerability stemming from improper handling of the bootstrap_host and bootstrap_port input fields. This flaw enables unauthenticated attackers to manipulate outbound requests through crafted inputs sent to the /generate endpoint of the Decode worker. By doing so, attackers can probe internal network hosts and ports, potentially leading to information leakage and disruption of the scheduler loop, which may delay legitimate inference requests.

References