CVE-2026-112268
Received Received - Intake

Authorization Bypass in sglang-router via Data-Plane API Key

Publication date: 2026-10-19

Last updated on: 2026-10-19

Assigner: VulnCheck

Description
sglang-router (sgl-model-gateway) through 0.3.2 contains an authorization bypass vulnerability that allows holders of the data-plane API key to access mesh HA management routes because /ha/* endpoints skip control-plane Admin role checks. Attackers can read cluster topology, write gossiped configuration, change global rate limits, and call POST /ha/shutdown to silently dissolve HA coordination.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-19
Last Modified
2026-10-19
Generated
2026-10-19
AI Q&A
2026-10-19
EPSS Evaluated
N/A
NVD
CVE-2026-112268
EUVD
EUVD-2026-104305

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sgl-project sglang-router 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-863 The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an authorization bypass in sglang-router (sgl-model-gateway) through version 0.3.2. It allows users with a data-plane API key to access mesh High Availability (HA) management routes under /ha/*. These endpoints skip required control-plane Admin role checks, enabling unauthorized actions like reading cluster topology, modifying configuration, changing rate limits, and triggering POST /ha/shutdown to disrupt HA coordination.

Detection Guidance

To detect this vulnerability, check if any user with a data-plane API key can access /ha/* endpoints. Use curl commands to test access to these routes with a data-plane API key. Example: curl -H 'Authorization: Bearer <data-plane-api-key>' http://<target>/ha/status. If responses include cluster state or configuration data, the system is vulnerable.

Impact Analysis

Attackers with a data-plane API key could read sensitive cluster information, alter system configurations that propagate to peers, disrupt HA coordination by shutting down nodes, or modify global rate limits. Legitimate Admin credentials are incorrectly rejected on these routes, worsening the impact.

Mitigation Strategies

Immediately upgrade sgl-model-gateway to a patched version where control-plane RBAC is enforced on /ha/* routes. If upgrading is not possible, disable data-plane API key access to these routes or restrict API key usage to trusted networks. Verify that only Admin credentials can access /ha/* endpoints.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-112268. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart