CVE-2026-10775 json
sgl-project SGLang Cache data_hash denial of service
published 2026-06-03 5 mo ago modified 2026-08-19 2 mo ago also GHSA-jrcc-j37m-v8fg , PYSEC-2026-3695 , EUVD-2026-34185
- cvss
- 3.6
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.1%
- EPSS 0.1% chance of exploitation in 30 days, percentile 1%
- public exploits
- 0
- none known
Summary
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
Patch / fix
- github.com/sgl-project/sglang#22033 pull request
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.12% chance of exploitation in the next 30 days, higher than 1% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/sgl-project/sglang/pull/22033 referenced PoC, tagged "exploit" by a source, unverified
- vuldb.com https://vuldb.com/submit/831438 referenced PoC, tagged "exploit" by a source, unverified
- github.com https://github.com/sgl-project/sglang/issues/25462 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 2.0 | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 3.6 | CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 2.4 | AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 1.1 | CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
| NVD | 3.1 | 5.3 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H |
| CNA | 2.0 | 2.4 | AV:L/AC:H/Au:S/C:N/I:P/A:P |
| OSV | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
| GitHub | 3.1 | 3.6 | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | sglang | <=0.5.11 |
no fix listed |
Affected products
- sgl-project SGLang
Classification
- Weakness
-
- CWE-404 Improper Resource Shutdown or Release
References
-
github.com
/sgl-project/sglang/pull/22033
issue-tracking, patch, exploit, web
-
vuldb.com
/submit/831438
third-party-advisory, exploit, web, vdb-entry
-
github.com
/sgl-project/sglang/issues/25462
exploit, issue-tracking, web
-
vuldb.com
/vuln/368138
vdb-entry, technical-description, web, third-party-advisory
-
vuldb.com
/vuln/368138/cti
signature, permissions-required, web, vdb-entry
-
vuldb.com
/cve/CVE-2026-10775
third-party-advisory, web, vdb-entry
-
github.com
/sgl-project/sglang/
product
-
nvd.nist.gov
/vuln/detail/CVE-2026-10775
advisory
-
github.com
/sgl-project/sglang
package
-
pypi.org
/project/sglang
package
-
github.com
/advisories/GHSA-jrcc-j37m-v8fg
advisory
Sources
- CVE List CVE-2026-10775
- GitHub Advisory GHSA-jrcc-j37m-v8fg
- NVD CVE-2026-10775
- OSV PYSEC-2026-3695
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.