CVE-2026-112082
sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service
CVSS Score
7.5
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.
| CWE | CWE-404 |
| Vendor | sgl-project |
| Product | sglang |
| Published | Oct 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for sgl-project sglang
Be the first to know when new high vulnerabilities affecting sgl-project sglang are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:C Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
sgl-project / SGLang
0.5.0 0.5.1 0.5.2 0.5.3 0.5.4 0.5.5 0.5.6 0.5.7 0.5.8 0.5.9 0.5.10 0.5.11 0.5.12 0.5.13 0.5.14 0.5.15 0.5.16 0.5.17 0.5.18 0.5.19
References
vuldb.com: https://vuldb.com/vuln/421761 vuldb.com: https://vuldb.com/vuln/421761/cti vuldb.com: https://vuldb.com/cve/CVE-2026-112082 vuldb.com: https://vuldb.com/submit/1009918 github.com: https://github.com/sgl-project/sglang/issues/42071 github.com: https://github.com/sgl-project/sglang/pull/42098 github.com: https://github.com/sgl-project/sglang/
Credits
🔍 Zyz3366 (VulDB User) VulDB CNA Team