CVE-2026-15978

The SGLang open-source framework for serving large language models contains a model weight exfiltration vulnerability (CVE-2026-15978). When no API keys are configured, the framework exposes two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL , subsequ...