一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月19日

CVE-2026-112083 [MEDIUM] – A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the fu

未分类
📑 文章目录

A security flaw has been discovered in sgl-project SGLang up to 0.5.19. Affected is the function WeightExporter.send_weights_to_remote_instance of the file python/sglang/srt/model_executor/model_runner_components/weight_exporter.py of the component Weight Exporter. Performing a manipulation of the argument group_name results in denial of service. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.