CVE-2026-15976

SGLang contains a Remote Code Execution (RCE) vulnerability when loading model weights from a HuggingFace repository via /update_weights_from_disk. The issue arises because torch.load(..., weights_only=False) can fall back to pickle deserialization of .bin files, enabling arbitrary code execution...