CVE-2026-112082

7.5 HIGHpublic exploit available

Published 2026-10-19 · Updated 2026-10-19

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was identified in sgl-project SGLang up to 0.5.19. This impacts the function Scheduler.expert_distribution_handle of the file python/sglang/srt/eplb/expert_distribution.py of the component Expert-Distribution Recording Endpoint. Such manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The pull request to fix this issue awaits acceptance.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-404

Public exploit & PoC references

https://github.com/sgl-project/sglang/
https://github.com/sgl-project/sglang/issues/42071
https://github.com/sgl-project/sglang/pull/42098

All references

https://github.com/sgl-project/sglang/
https://github.com/sgl-project/sglang/issues/42071
https://github.com/sgl-project/sglang/pull/42098
https://vuldb.com/cve/CVE-2026-112082
https://vuldb.com/submit/1009918
https://vuldb.com/vuln/421761
https://vuldb.com/vuln/421761/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

MEDIUMCVE-2026-100890
MEDIUMCVE-2026-100895PoC
MEDIUMCVE-2026-101040PoC
MEDIUMCVE-2026-101098PoC
MEDIUMCVE-2026-103118
MEDIUMCVE-2026-103241PoC
MEDIUMCVE-2026-105250PoC
MEDIUMCVE-2026-105922PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.