CVE-2026-109228 | sgl-project SGLang up to 0.5.21 Video Processing glm4v.py allocation of resources

October 12, 2026 Yanac

A vulnerability has been found in sgl-project SGLang up to 0.5.21 and classified as problematic. This issue affects some unknown processing of the file glm4v.py of the component Video Processing. Performing a manipulation of the argument fps/max_frames/max_tokens_per_frame/max_image_tokens results in allocation of resources.

This vulnerability is reported as CVE-2026-109228. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More