[Security][Bug] Prevent binding to all TCP interfaces (#5752)

2025-05-06 00:51:45 +05:30
parent a68ed76682
commit 683707c314
1 changed files with 2 additions and 1 deletions
--- a/python/sglang/srt/distributed/device_communicators/shm_broadcast.py
+++ b/python/sglang/srt/distributed/device_communicators/shm_broadcast.py
@@ -225,7 +225,8 @@ class MessageQueue:
            remote_subscribe_port = get_open_port()
            if is_valid_ipv6_address(connect_ip):
                self.remote_socket.setsockopt(IPV6, 1)
-            socket_addr = f"tcp://*:{remote_subscribe_port}"
+                connect_ip = f"[{connect_ip}]"
+            socket_addr = f"tcp://{connect_ip}:{remote_subscribe_port}"
            self.remote_socket.bind(socket_addr)

        else: