CVE-2026-94570: Input Validation
SGLang contains a DoS vulnerability caused by missing input validation for AUXDATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial of service against the target server.
Affected Software
Event History
Frequently Asked Questions
Which systems are exposed to this denial-of-service condition?
Systems are exposed when an attacker has network reachability to the Decode control PULL socket. The issue affects the Decode worker's handling of AUX_DATA ZeroMQ control messages.
Does exploitation require authentication or prior access?
No. An attacker can exploit the issue without authentication if they can reach the Decode control PULL socket over the network.
What is the operational impact of a successful exploit?
A malformed or otherwise unvalidated AUX_DATA control message can terminate the Decode control thread, causing denial of service against the target server.