CVE-2026-15971

SGLang contains a remote code execution vulnerability (CVE-2026-15971) that triggers when the optional dumper subsystem is enabled. The root cause is a sandbox escape via DUMPER_SERVER_PORT, enabling code execution on inference requests. Multiple sources (NVD, CVE lists, OSV, etc.) consistently d...

CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

EUVD-2026-51262

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

CVE-2026-15971 CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...