Vulnerability Description
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rank_ip and rank_port values to redirect decode workers to attacker-controlled endpoints, causing denial of service or disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/sgl-project/sglang
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/disaggregat
- https://github.com/sgl-project/sglang/blob/v0.5.19/python/sglang/srt/disaggregat
- https://github.com/sgl-project/sglang/issues/39400
- https://www.vulncheck.com/advisories/sglang-through-0.5.19-unauthenticated-route
FAQ
What is CVE-2026-92972?
CVE-2026-92972 is a vulnerability with a CVSS score of 8.6 (HIGH). SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing tab...
How severe is CVE-2026-92972?
CVE-2026-92972 has been rated HIGH with a CVSS base score of 8.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-92972?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.