Medium severity · published Sep 22, 2026
CVE-2026-94570
No description published yet
5.9
CVSS
0.5%
EPSS
No
On KEV
Description
SGLang contains a DoS vulnerability caused by missing input validation for AUX_DATA ZeroMQ control messages in the Decode worker, which enables an unauthenticated remote attacker with network reachability to the Decode control PULL socket to terminate the Decode control thread and cause a denial of service against the target server.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
SGLang · SGLang
through 0.5.15 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-94570
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-94570
gist.github.com
https://gist.github.com/yyymk/b5892625cb5efa2bffd36e0b05334ae8
More from SGLang
9.8
CVE-2026-93034
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in…
9.8
CVE-2026-93088
No description published yet
9.8
CVE-2026-86793
No description published yet
9.8
CVE-2026-15969
No description published yet
9.8
CVE-2026-15976
No description published yet
