CVE-2026-15971

In CVE-2026-15971, SGLang contains a remote code execution vulnerability when the optional dumper subsystem is enabled. A sandbox escape occurs if DUMPER_SERVER_PORT is set, enabling code execution on inference requests.