CVE-2026-112267

SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...

CVE-2026-112267

SGLang versions through 0.5.22 are vulnerable to a Server-Side Request Forgery (SSRF) vulnerability when operating in prefill/decode disaggregation mode . The flaw exists in the Decode worker because the /generate endpoint fails to properly validate the client-supplied bootstrap_host and bootstra...

EUVD-2026-104306

SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...

CVE-2026-112267 SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker

SGLang through 0.5.22 in prefill/decode disaggregation mode contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests via client-supplied bootstraphost and bootstrapport fields. Attackers sending crafted requests to the Decode worker's...