CyberRota Analysis
AI-GeneratedThe vulnerability in SGLang allows unauthenticated attackers to exploit a PUT /route endpoint in the prefill bootstrap service, enabling them to manipulate the KV transfer routing table. This can lead to denial of service or the exposure of sensitive KV transfer metadata, including session identifiers and tensor-parallel topology parameters. Organizations using SGLang versions up to 0.5.19 should prioritize patching this vulnerability to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang through 0.5.19 in prefill/decode disaggregation mode contains an unauthenticated PUT /route endpoint on the prefill bootstrap service that allows attackers to poison the KV transfer routing table. Attackers can supply arbitrary rank_ip and rank_port values to redirect decode workers to attacker-controlled endpoints, causing denial of service or disclosure of KV transfer metadata including session identifiers and tensor-parallel topology parameters.