CVE-2026-110809 | sgl-project SGLang up to 0.5.19 Session Cleanup session_controller.py Session.create_req denial of service (Issue 41470)

October 14, 2026 Yanac

A vulnerability described as problematic has been identified in sgl-project SGLang up to 0.5.19. Affected by this issue is the function Session.create_req of the file python/sglang/srt/session/session_controller.py of the component Session Cleanup. Such manipulation leads to denial of service.

This vulnerability is listed as CVE-2026-110809. The attack may be performed from remote. In addition, an exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More