Browse CVEs

CRITICAL 9.8 CVE-2026-15969 SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary comma… Sglang after 0.5.15 Fix from $2,3002026-07-30 CRITICAL 9.8 CVE-2026-15971 SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, ena… Sglang after 0.5.15 Fix from $2,3002026-07-30 CRITICAL 9.8 CVE-2026-15976 SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from… Sglang after 0.5.15 Fix from $2,3002026-07-30 HIGH 7.5 CVE-2026-15977 SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the… Sglang after 0.5.15 Fix from $1,9502026-07-30 HIGH 7.5 CVE-2026-15978 SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote at… Sglang after 0.5.15 Fix from $1,9502026-07-30 MEDIUM 6.5 CVE-2026-15974 SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access … Sglang after 0.5.15 Fix from $1,6002026-07-30 CRITICAL 9.1 CVE-2026-14890 SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authenticatio… Sglang after 0.5.14 Fix from $2,3002026-07-16 MEDIUM 5.3 CVE-2026-10775 A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Ha… Sglang after 0.5.11 Fix from $1,6002026-06-03 CRITICAL 9.8 CVE-2026-7301 SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming… Sglang Mitigation only Fix from $2,3002026-05-18 CRITICAL 9.8 CVE-2026-7304 SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabl… Sglang Mitigation only Fix from $2,3002026-05-18 CRITICAL 9.1 CVE-2026-7302 SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files… Sglang Mitigation only Fix from $2,3002026-05-18 CRITICAL 9.8 CVE-2026-5760 SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is load… Sglang 0.5.11+ Fix from $2,3002026-04-20 CRITICAL 9.8 CVE-2026-3059 SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted dat… Sglang after 0.5.9 Fix from $2,3002026-03-12 CRITICAL 9.8 CVE-2026-3060 SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deseri… Sglang after 0.5.9 Fix from $2,3002026-03-12 HIGH 7.8 CVE-2026-3989 SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of … Sglang 0.5.10+ Fix from $1,9502026-03-12