CyberRota Analysis
AI-GeneratedThe vulnerability in SGLang allows unauthorized access to sensitive information, including API keys and SSL keyfile details, through the /server_info endpoint when the --admin-api-key is configured. This poses a significant risk of credential leakage, potentially leading to unauthorized system access and data breaches. Organizations utilizing SGLang should prioritize addressing this vulnerability to safeguard their sensitive credentials and maintain system integrity.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.
Related CVEs
Other vulnerabilities affecting the same vendor(s)