CVE-2026-109228: SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
SGLang through 0.5.21 contains a resource budget bypass vulnerability that allows remote attackers to override GLM-V video processing limits by supplying fps, maxframes, maxtokensperframe and maximagetokens in the videourl object. Attackers can set these values arbitrarily high so glm4v.py decodes every frame of high-resolution video at full size, exhausting worker memory and denying service.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can exploit it without authentication or user interaction, provided they can submit a request containing a GLM-V video_url object to the affected SGLang service.
What request values are involved in the bypass?
The bypass uses fps, max_frames, max_tokens_per_frame, and max_image_tokens supplied in the video_url object. These values can be set arbitrarily high, overriding video-processing resource limits.
What is the practical impact on an affected worker?
The worker may decode every frame of a high-resolution video at full size. This can exhaust worker memory and cause denial of service.
Which versions are identified as affected?
SGLang through version 0.5.21 is identified as affected.