Unauthenticated Route Poisoning Vulnerability in SGLang by SGL Project

CVE-2026-92972

What is CVE-2026-92972?

The SGLang application, up to version 0.5.19, features a vulnerability in its prefill bootstrap service that exposes an unauthenticated PUT /route endpoint. This flaw enables attackers to manipulate the KV transfer routing table by providing arbitrary rank_ip and rank_port values. Such manipulation can redirect decode workers to malicious endpoints, potentially leading to denial of service instances or unauthorized access to sensitive KV transfer metadata. This includes exposure of session identifiers and tensor-parallel topology parameters, posing significant security risks.

References