CVE-2026-109229
Deferred Deferred - Pending Action

SGLang Denial of Service via Pillow Decompression Bomb Bypass

Publication date: 2026-10-12

Last updated on: 2026-10-12

Assigner: VulnCheck

Description
SGLang through 0.5.21 contains a denial of service vulnerability that disables Pillow decompression bomb protection process-wide by setting Image.MAX_IMAGE_PIXELS to None in NanoNemotronVLImageProcessor. Remote attackers can submit small, highly compressed images with huge dimensions to the generic image loader, exhausting worker memory during decoding.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-12
Last Modified
2026-10-12
Generated
2026-10-12
AI Q&A
2026-10-12
EPSS Evaluated
N/A
NVD
CVE-2026-109229
EUVD
EUVD-2026-97435

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sgl-project sglang 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-409 The product does not handle or incorrectly handles a compressed input with a very high compression ratio that produces a large output.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

SGLang through version 0.5.21 has a denial of service vulnerability where Pillow's decompression bomb protection is disabled process-wide. This happens because Image.MAX_IMAGE_PIXELS is set to None in NanoNemotronVLImageProcessor. Attackers can exploit this by sending small, highly compressed images with extremely large dimensions to the generic image loader, causing worker memory exhaustion during decoding.

Detection Guidance

To detect this vulnerability, monitor for processes using SGLang that have unusually high memory usage during image processing. Check if Image.MAX_IMAGE_PIXELS is set to None in the NanoNemotronVLImageProcessor configuration. Look for small, highly compressed images with extremely large dimensions being processed by the system.

Impact Analysis

This vulnerability can lead to system crashes or unresponsiveness due to excessive memory consumption when processing malicious images. It may disrupt services relying on SGLang, cause downtime, or require manual intervention to restart affected processes.

Compliance Impact

This vulnerability could impact compliance with GDPR and HIPAA by enabling denial of service attacks that disrupt system availability. GDPR requires data protection measures to ensure availability of systems, while HIPAA mandates safeguards against disruptions. Memory exhaustion from decompression bombs may violate these requirements by compromising system integrity and availability.

Mitigation Strategies

Immediately update SGLang to a version beyond 0.5.21 where this issue is fixed. Set Image.MAX_IMAGE_PIXELS to a reasonable value (e.g., 1000000) to prevent decompression bomb attacks. Restrict image uploads to trusted sources and implement size limits on image dimensions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-109229. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart