SGLang is vulnerable to an unauthenticated information disclosure flaw that exposes sensitive credentials, posing a significant risk of unauthorized system access.

This vulnerability is an instance of CWE-522 (Insufficiently Protected Credentials) occurring in the /server_info endpoint. An unauthenticated attacker can retrieve sensitive API keys and SSL keyfile paths when the service is configured with only the --admin-api-key setting.

The exposure of API keys and SSL credentials grants an attacker the ability to impersonate administrative functions or decrypt secure communications within the infrastructure. With a CVSS score of 7.5, this high-severity vulnerability represents a direct threat to the confidentiality of the environment, potentially leading to full system compromise or lateral movement within the network.

Immediate Action: Review the official SGLang security advisory and apply the vendor-recommended updates as soon as they become available. Ensure that the /server_info endpoint is restricted from public network access.

Proactive Monitoring: Monitor server access logs for any unauthorized requests directed at the /server_info endpoint, particularly those originating from untrusted network segments.

Compensating Controls: Implement strict network-level access control lists (ACLs) to block external access to the SGLang management interface. Utilize a Web Application Firewall (WAF) to filter or block requests targeting the /server_info path.

Public Exploit Available: Yes, a proof-of-concept has been documented in the research write-up by Apoorv Dayal.

The sensitivity of the leaked information necessitates immediate attention to this vulnerability. Organizations should prioritize restricting network access to the affected endpoint while awaiting official patches, as the ability for unauthenticated actors to retrieve administrative credentials can lead to rapid and widespread security failure.