CVE-2026-103042 LightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value

LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL control channel when started with --pdtransmode nccl, allowing unauthenticated attackers to exhaust KV-transfer worker memory. Attackers can call the exposedsetvalue method to store unbounded key-value pairs without siz...

CVE-2026-102634

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

CVE-2026-102634

SGLang versions through 0.5.20 are vulnerable to a Denial of Service (DoS) when running in prefill/decode disaggregation mode with the Mooncake KV transfer backend . The root cause is a failure to validate duplicate bootstrap_room fields in /generate requests. An unauthenticated attacker can expl...

EUVD-2026-89029

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

CVE-2026-102634 SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

CVE-2026-102634 SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

CVE-2026-102634 SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

PT-2026-102682

Name of the Vulnerable Software and Affected Versions SGLang versions prior to 0.5.21 Description When operating in prefill/decode disaggregation mode with the Mooncake KV transfer backend, the software fails to validate duplicate bootstrap room fields in the '/generate' endpoint. Unauthenticated...

CVE-2026-102634: Use of Multiple Resources with Duplicate Identifier

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstraproom fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstraproom values to crash scheduler processes or hang oth...

CVE-2026-96560

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

CVE-2026-96560 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

CVE-2026-96560 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

EUVD-2026-85294

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

CVE-2026-96560

LightLLM versions through 1.2.0 are vulnerable to remote code execution (RCE) due to a flaw in the KV-transfer worker . When the service is started with the --pd_trans_mode nccl flag, it exposes an unauthenticated RPyC control channel . This channel is susceptible to the deserialization of untrus...

CVE-2026-96560 LightLLM through 1.2.0 Unauthenticated Remote Code Execution via NCCL PD RPyC Control Channel

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

CVE-2026-96560: Deserialization of Untrusted Data

LightLLM through 1.2.0 contains a remote code execution vulnerability in the KV-transfer worker when started with --pdtransmode nccl, which exposes an unauthenticated RPyC control channel that deserializes attacker-supplied data. Attackers can send malicious pickled objects to the exposed RPyC...

PT-2026-97321

Name of the Vulnerable Software and Affected Versions LightLLM versions prior to 1.2.1 Description Remote code execution is possible in the KV-transfer worker when the service is started with the --pd trans mode nccl configuration. This configuration exposes an unauthenticated RPyC control channe...

PT-2026-96316

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description OpenAI-compatible completion endpoints fail to validate the tp size parameter within kv transfer params. In prefill/decode disaggregated deployments, an attacker can provide arbitrary values for tp siz...

PT-2026-96314

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.29.1 Description A denial of service issue exists in P2P KV offloading when the OffloadingConnector is configured with TieringOffloadingSpec and a peer-to-peer secondary tier. An attacker can provide arbitrary remote...

EUVD-2026-82984

SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstraproom values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrary bootstraproom...