CVE-2026-86793

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

EUVD-2026-76073

SGLang allows unauthenticated pickle deserialization through /updateweightsfromtensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE...

CVE-2026-86793

SGLang is vulnerable to remote code execution through its /update_weights_from_tensor endpoint. When no authentication keys are configured, an unauthenticated attacker can send a crafted pickle payload. The application's SafeUnpickler policy is bypassable because builtins.import and builtins.geta...