CVE-2026-7669

creationtimestamp| type| source ---|---|--- 2026-05-04 01:00:38+00:00| seen| https://t.me/GithubRedTeam/82694 2026-05-04 09:00:04+00:00| seen| Telegram/XcvE3DqJ3gfHbHlWBgCF8vzzdw-S4AP1Zm7AyYzHhyXEw...

CVE-2026-7669 sgl-project SGLang HuggingFace Transformer hf_transformers_utils.py get_tokenizer code injection

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function gettokenizer of the file python/sglang/srt/utils/hftransformersutils.py of the component HuggingFace Transformer Handler. The manipulation of the argument trustremotecode with the input False as part of Boole...