CVE-2026-10775CWE-404

sgl-project SGLang Cache data_hash denial of service

Low · published June 3, 2026

CVSS v4.0
2.0
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

The record
Technical detail
CVSS v4.0
2.0 · LOW
Vector
CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00120 · 1.8th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-06-03T22:15Z
EPSS history
Timeline
  • 03 JUN 22:15Z
    sgl-project SGLang Cache data_hash denial of service
    cvelistv5