CVE-2026-10775
published 2026-06-03CVE-2026-10775: A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler…
PriorityP425medium5.3CVSS 3.1
AVLACHPRLUINSUCNILAH
EPSS
0.12%
2.2th percentile
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| lmsys | sglang | <= 0.5.11 | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
| sgl-project | sglang | — | — |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H
nvdv4.01.1LOWCVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.02.4LOWAV:L/AC:H/Au:S/C:N/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A vulnerability was determined in sgl-project SGLang up to 0.5.11.
ghsa_unreviewed·2026-06-04
CVE-2026-10775 [LOW] CWE-404 A vulnerability was determined in sgl-project SGLang up to 0.5.11.
A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.
VulDB
sgl-project SGLang up to 0.5.11 Cache data_hash denial of service (Issue 25462 / EUVD-2026-34185)
vuldb·2026-06-03·CVSS 1.1
CVE-2026-10775 [LOW] sgl-project SGLang up to 0.5.11 Cache data_hash denial of service (Issue 25462 / EUVD-2026-34185)
A vulnerability was found in sgl-project SGLang up to 0.5.11. It has been rated as problematic. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service.
This vulnerability is tracked as CVE-2026-10775. The attack is restricted to local execution. Moreover, an exploit is present.
The pull request to fix this issue awaits acceptance.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/sgl-project/sglang/https://github.com/sgl-project/sglang/issues/25462https://github.com/sgl-project/sglang/pull/22033https://vuldb.com/cve/CVE-2026-10775https://vuldb.com/submit/831438https://vuldb.com/vuln/368138https://vuldb.com/vuln/368138/ctihttps://github.com/sgl-project/sglang/pull/22033https://vuldb.com/submit/831438
2026-06-03
Published