CVE-2026-112266 SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

SGLang through 0.5.22 contains a denial of service vulnerability that allows API clients to abort other users' in-flight generation requests by supplying a short client-controlled rid. Attackers can submit streaming /generate requests with single hex character rids and disconnect, triggering...