CVE-2026-86793

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

CVE-2026-86793 CVE-2026-86793

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

EUVD-2026-76073

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

CVE-2026-86793 CVE-2026-86793

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

CVE-2026-86793

SGLang is vulnerable to unauthenticated Remote Code Execution (RCE) due to insecure pickle deserialization. The flaw exists in the /update_weights_from_tensor endpoint when no authentication keys are configured. Attackers can bypass the SafeUnpickler policy because builtins.import and builtins.ge...

PT-2026-89864

Name of the Vulnerable Software and Affected Versions SGLang affected versions not specified Description SGLang allows unauthenticated pickle deserialization through the '/update weights from tensor' endpoint when no authentication keys are configured. The SafeUnpickler policy can be bypassed...

CVE-2026-86793: Improper Control of Generation of Code

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...