Is CVE-2026-112268 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-112268 being exploited in the wild.

How severe is CVE-2026-112268?

Medium severity, with a CVSS score of 6.3, published 19 October 2026.

Which products and versions are affected?

Sgl-Project Sgl-Model-Gateway through 0.3.2.

Is there a fix for CVE-2026-112268?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-112268 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-112268?

Check whether you run Sgl-Project Sgl-Model-Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-112268: sglang sgl-model-gateway authorization bypass in mesh HA routes

CVE-2026-112268 · Severity: medium · CVSS 6.3 · Published 2026-10-19

sgl-model-gateway is a model serving gateway for distributed AI inference that manages cluster topology and failover when mesh high-availability (HA) is enabled. Holders of the data-plane API key can bypass authorization controls on mesh HA management endpoints, allowing them to read cluster topology, modify global rate limits, and force the mesh cluster to disconnect, disrupting service availability.

Vendors: Sgl-Project.

Quick answers

Is CVE-2026-112268 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-112268 being exploited in the wild.
How severe is CVE-2026-112268?: Medium severity, with a CVSS score of 6.3, published 19 October 2026.
Which products and versions are affected?: Sgl-Project Sgl-Model-Gateway through 0.3.2.
Is there a fix for CVE-2026-112268?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-112268 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-112268?: Check whether you run Sgl-Project Sgl-Model-Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The /ha/* endpoints in sgl-model-gateway versions through 0.3.2 are protected only by data-plane API key authentication, not by control-plane Admin role checks. An attacker with a data-plane API key can access mesh HA management routes to read cluster state, write gossiped configuration, modify global rate limits, and invoke POST /ha/shutdown to dissolve HA coordination. This is a CWE-863 authorization bypass that affects deployments with --enable-mesh and --control-plane-api-keys enabled.

Affected products

sgl-project sgl-model-gateway through 0.3.2

Timeline

2026-07-29: disclosed: Privately reported via GitHub Security Advisories as GHSA-wq43-832p-rmjx
2026-10-18: advisory: Public disclosure in GitHub issue #45006
2026-10-19: other: CVE-2026-112268 published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.