CyberRota Analysis
AI-GeneratedThe vulnerability affects SGLang versions up to 0.5.19 when operating in prefill/decode disaggregation mode with the Mooncake KV transfer backend, allowing unauthenticated attackers to exploit the decode engine's POST /generate endpoint. By submitting arbitrary bootstrap_room values, attackers can cause unbounded memory allocation, leading to potential out-of-memory conditions and service disruptions. Organizations using this version of SGLang should prioritize patching to mitigate the risk of denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang through 0.5.19 in prefill/decode disaggregation mode with Mooncake KV transfer backend fails to validate bootstrap_room values, allowing unbounded transfer state allocation. Unauthenticated attackers can reach the decode engine's POST /generate endpoint and submit arbitrary bootstrap_room values to exhaust prefill process memory until out-of-memory termination.