TI-2026-67708 Aliases CVE-2026-105245 GHSA-fr3j-h92j-cm4p

Cleartext transmission in sglang HTTP server_info endpoint

MEDIUM 61CWE-310Published 2026-10-05 · Updated 2026-10-07

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: None
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-319.

Summary

The sgl-project sglang versions from 0.5.0 up to 0.5.21 are affected. Manipulating the api_key argument of the server_info function in the HTTP endpoint causes sensitive information to be sent in cleartext (CWE-319). A remote attacker without privileges can trigger this, although the attack is highly complex. A public exploit has been disclosed and may be used.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

A vulnerability has been found in sgl-project sglang up to 0.5.21. This issue affects the function server_info of the file python/sglang/srt/entrypoints/http_server.py of the component HTTP Endpoint. Such manipulation of the argument api_key leads to cleartext transmission of sensitive information. It is possible to launch the attack remotely. Attacks of this nature are highly complex. The exploitability is assessed as difficult. The exploit has been disclosed to the public and may be used. The pull request to fix this issue awaits acceptance.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.00204 10th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
sgl-project	sglang	0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; 0.5.6; 0.5.7; 0.5.8; 0.5.9; 0.5.10; 0.5.11; 0.5.12; 0.5.13; 0.5.14; 0.5.15; 0.5.16; 0.5.17; 0.5.18; 0.5.19; 0.5.20; 0.5.21	—	No fix listed	CNA

sglang Vendorsgl-project Affected 0.5.0; 0.5.1; 0.5.2; 0.5.3; 0.5.4; 0.5.5; 0.5.6; 0.5.7; 0.5.8; 0.5.9; 0.5.10; 0.5.11; 0.5.12; 0.5.13; 0.5.14; 0.5.15; 0.5.16; 0.5.17; 0.5.18; 0.5.19; 0.5.20; 0.5.21 Fixed in — No fix listed CNA

CPE names CNA · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:sgl-project:sglang::::::::	—	—	—

cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:* Versions — — ·—

Remediation

The sources list no fixed version for sgl-project sglang.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

2026-10-05 Threatist record created from CVE-2026-105245
2026-10-05 Alias added: GHSA-fr3j-h92j-cm4p
2026-10-05 Priority changed: MEDIUM → LOW
2026-10-07 CISA SSVC decision points changed
2026-10-07 Priority changed: LOW → MEDIUM

References

TI-2026-76247 Denial of service in SGLang expert-distribution recording endpoint CVSS 4.0HIGH 8.7
TI-2026-70996 SGLang disables decompression bomb check, enabling denial of service CVSS 4.0HIGH 8.7
TI-2026-70994 SGLang Memory Exhaustion DoS via Qwen-VL Video Preprocessing CVSS 4.0HIGH 8.7
TI-2026-70993 Decompression amplification in SGLang load_audio exhausts memory CVSS 4.0HIGH 8.7
TI-2026-65453 SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room CVSS 4.0HIGH 8.7
TI-2026-75290 Code injection in SGLang debug dumper filter CVSS 4.0CRITICAL 9.2

See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences