CVE-2026-109226: SGLang through 0.5.21 Audio Decompression Amplification via load_audio
SGLang through 0.5.21 contains a decompression amplification vulnerability in loadaudio that allows remote attackers to exhaust memory by submitting highly compressed audio decoded without duration or sample limits. Attackers can supply small FLAC-encoded silence files through audiourl or audiodata inputs that expand into massive PCM buffers, exhausting worker memory and CPU for denial of service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote, unauthenticated attacker can exploit it if they can submit audio through the audio_url or audio_data inputs. Exploitation does not require user interaction.
What is required to trigger the denial of service?
The attacker submits a small, highly compressed FLAC audio file, such as encoded silence. When load_audio decodes it without duration or sample limits, it can expand into very large PCM buffers and consume worker memory and CPU.
What impact should operators expect?
The stated impact is denial of service through exhaustion of worker memory and CPU. No confidentiality or integrity impact is indicated by the supplied severity vector.
Which versions are affected?
SGLang through version 0.5.21 is affected. The provided information does not identify a fixed version.