CVE-2026-112270: SGLang through 0.5.22 Memory Exhaustion via Mooncake STAGING_RSP chunk_idx
SGLang through 0.5.22 with the Mooncake disaggregation backend contains an uncontrolled memory allocation vulnerability in handlestagingrsp() that lets unauthenticated network-adjacent attackers exhaust Prefill memory. Attackers can obtain the rank address from the /route endpoint and send STAGINGRSP messages with huge chunkidx values under fresh room IDs, causing the scheduler to be OOM-killed.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
SGLang deployments through 0.5.22 that use the Mooncake disaggregation backend are affected. The vulnerable path exhausts Prefill memory.
What does an attacker need to exploit this?
An unauthenticated network-adjacent attacker needs network access sufficient to query the /route endpoint for the rank address and send STAGING_RSP messages to it. Exploitation uses very large chunk_idx values with fresh room IDs.
What is the operational impact?
The attacker can force uncontrolled memory allocation until the scheduler is OOM-killed, causing denial of service. No confidentiality or integrity impact is described.