https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T03:12:34.741659+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-102634 CVE-2026-102634 — SGLang through 0.5.20 Denial of Service via Duplicate bootstrap_room 2026-10-01T03:12:34.743288+00:00

Affected: sgl-project sglang

SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate duplicate bootstrap_room fields in /generate requests with Mooncake KV transfer backend. Unauthenticated attackers can send concurrent requests with identical bootstrap_room values to crash scheduler processes or hang other users' requests until transfer timeout.