PT-2026-89864

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description SGLang allows unauthenticated pickle deserialization through the '/update weights from tensor' endpoint when no authentication keys are configured. The SafeUnpickler policy can be bypassed...