CVE-2026-10775

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10775", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-06-03T15:46:16.282Z", "datePublished": "2026-06-03T22:15:10.154Z", "dateUpdated": "2026-06-04T13:38:02.903Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-03T22:15:10.154Z"}, "title": "sgl-project SGLang Cache data_hash denial of service", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "Denial of Service"}]}], "affected": [{"vendor": "sgl-project", "product": "SGLang", "versions": [{"version": "0.5.0", "status": "affected"}, {"version": "0.5.1", "status": "affected"}, {"version": "0.5.2", "status": "affected"}, {"version": "0.5.3", "status": "affected"}, {"version": "0.5.4", "status": "affected"}, {"version": "0.5.5", "status": "affected"}, {"version": "0.5.6", "status": "affected"}, {"version": "0.5.7", "status": "affected"}, {"version": "0.5.8", "status": "affected"}, {"version": "0.5.9", "status": "affected"}, {"version": "0.5.10", "status": "affected"}, {"version": "0.5.11", "status": "affected"}], "cpes": ["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"], "modules": ["Cache Handler"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "LOW"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.6, "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.6, "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "LOW"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.4, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-06-03T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-06-03T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-06-03T17:51:27.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "Dem0 (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/368138", "name": "VDB-368138 | sgl-project SGLang Cache data_hash denial of service", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/368138/cti", "name": "VDB-368138 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10775", "name": "CVE-2026-10775 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/831438", "name": "Submit #831438 | sgl-project/ sglang 0.5.11 Cache Poisoning", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sgl-project/sglang/issues/25462", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sgl-project/sglang/pull/22033", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/sgl-project/sglang/", "tags": ["product"]}]}, "adp": [{"references": [{"url": "https://vuldb.com/submit/831438", "tags": ["exploit"]}, {"url": "https://github.com/sgl-project/sglang/pull/22033", "tags": ["exploit"]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-04T13:35:58.281057Z", "id": "CVE-2026-10775", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-04T13:38:02.903Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10775", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-04T13:35:58.281057Z"}}}], "references": [{"url": "https://vuldb.com/submit/831438", "tags": ["exploit"]}, {"url": "https://github.com/sgl-project/sglang/pull/22033", "tags": ["exploit"]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-04T13:34:04.995Z"}}], "cna": {"title": "sgl-project SGLang Cache data_hash denial of service", "credits": [{"lang": "en", "type": "reporter", "value": "Dem0 (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 2, "baseSeverity": "LOW", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 3.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 3.6, "baseSeverity": "LOW", "vectorString": "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 2.4, "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"], "vendor": "sgl-project", "modules": ["Cache Handler"], "product": "SGLang", "versions": [{"status": "affected", "version": "0.5.0"}, {"status": "affected", "version": "0.5.1"}, {"status": "affected", "version": "0.5.2"}, {"status": "affected", "version": "0.5.3"}, {"status": "affected", "version": "0.5.4"}, {"status": "affected", "version": "0.5.5"}, {"status": "affected", "version": "0.5.6"}, {"status": "affected", "version": "0.5.7"}, {"status": "affected", "version": "0.5.8"}, {"status": "affected", "version": "0.5.9"}, {"status": "affected", "version": "0.5.10"}, {"status": "affected", "version": "0.5.11"}]}], "timeline": [{"lang": "en", "time": "2026-06-03T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-06-03T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-06-03T17:51:27.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/368138", "name": "VDB-368138 | sgl-project SGLang Cache data_hash denial of service", "tags": ["vdb-entry", "technical-description"]}, {"url": "https://vuldb.com/vuln/368138/cti", "name": "VDB-368138 | CTI Indicators (IOB, IOC, IOA)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10775", "name": "CVE-2026-10775 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/831438", "name": "Submit #831438 | sgl-project/ sglang 0.5.11 Cache Poisoning", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sgl-project/sglang/issues/25462", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sgl-project/sglang/pull/22033", "tags": ["issue-tracking", "patch"]}, {"url": "https://github.com/sgl-project/sglang/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "Denial of Service"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-03T22:15:10.154Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10775", "state": "PUBLISHED", "dateUpdated": "2026-06-04T13:38:02.903Z", "dateReserved": "2026-06-03T15:46:16.282Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-03T22:15:10.154Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:sgl-project:sglang:*:*:*:*:*:*:*:*"], "modules": ["Cache Handler"], "product": "SGLang", "vendor": "sgl-project", "versions": [{"status": "affected", "version": "0.5.0"}, {"status": "affected", "version": "0.5.1"}, {"status": "affected", "version": "0.5.2"}, {"status": "affected", "version": "0.5.3"}, {"status": "affected", "version": "0.5.4"}, {"status": "affected", "version": "0.5.5"}, {"status": "affected", "version": "0.5.6"}, {"status": "affected", "version": "0.5.7"}, {"status": "affected", "version": "0.5.8"}, {"status": "affected", "version": "0.5.9"}, {"status": "affected", "version": "0.5.10"}, {"status": "affected", "version": "0.5.11"}]}], "source": "cna@vuldb.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:lmsys:sglang:*:*:*:*:*:*:*:*", "matchCriteriaId": "D4E501A2-5314-4141-980F-B3FF4FFD7B6B", "versionEndIncluding": "0.5.11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance."}, {"lang": "es", "value": "Se determin\u00f3 una vulnerabilidad en sgl-project SGLang hasta la versi\u00f3n 0.5.11. Afectada por esta vulnerabilidad es la funci\u00f3n data_hash del componente Gestor de Cach\u00e9. Esta manipulaci\u00f3n causa denegaci\u00f3n de servicio. El ataque est\u00e1 restringido a ejecuci\u00f3n local. Un alto grado de complejidad es necesario para el ataque. La explotaci\u00f3n parece ser dif\u00edcil. El exploit ha sido divulgado p\u00fablicamente y puede ser utilizado. La solicitud de extracci\u00f3n para solucionar este problema espera aceptaci\u00f3n."}], "id": "CVE-2026-10775", "lastModified": "2026-07-22T20:10:00.127", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "LOW", "cvssData": {"accessComplexity": "HIGH", "accessVector": "LOCAL", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 2.4, "confidentialityImpact": "NONE", "integrityImpact": "PARTIAL", "vectorString": "AV:L/AC:H/Au:S/C:N/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 1.5, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 3.6, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 2.5, "source": "cna@vuldb.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:H", "version": "3.1"}, "exploitabilityScore": 1.0, "impactScore": 4.2, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "HIGH", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 1.1, "baseSeverity": "LOW", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10775", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-04T13:35:58.281057Z", "version": "2.0.3"}}]}, "published": "2026-06-03T23:16:17.077", "references": [{"source": "cna@vuldb.com", "tags": ["Product"], "url": "https://github.com/sgl-project/sglang/"}, {"source": "cna@vuldb.com", "tags": ["Issue Tracking"], "url": "https://github.com/sgl-project/sglang/issues/25462"}, {"source": "cna@vuldb.com", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/sgl-project/sglang/pull/22033"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/cve/CVE-2026-10775"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/submit/831438"}, {"source": "cna@vuldb.com", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/vuln/368138"}, {"source": "cna@vuldb.com", "tags": ["Permissions Required", "VDB Entry"], "url": "https://vuldb.com/vuln/368138/cti"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Issue Tracking", "Patch"], "url": "https://github.com/sgl-project/sglang/pull/22033"}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/submit/831438"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-404"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.0"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.1"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.2"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.3"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.4"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.5"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.6"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.7"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.8"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.9"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.10"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "0.5.11"}}], "enrichment": {"confidence": 95.0, "confidence_source": "inferred", "scores": [{"score": 95.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "SGLang", "source": "cna", "vendor": "sgl-project"}, "product": "sglang", "vendor": "sgl-project"}], "created": "2026-06-04T00:30:45.709108+00:00", "updated": "2026-06-04T00:30:45.967088+00:00", "vendors": ["sgl-project", "sgl-project$PRODUCT$sglang"]}