CVE-2026-112267

SGLang versions through 0.5.22 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability when operating in prefill/decode disaggregation mode . The flaw exists in the Decode worker because the /generate endpoint fails to properly validate the client-supplied bootstrap_host and bootstra...