CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-15969

SGLang is affected by an unauthenticated RCE in /load_lora_adapter_from_tensors, caused by bypassing SafeUnpickler’s incomplete denylist. The vulnerability enables arbitrary command execution via crafted base64-encoded pickle payloads. The root cause is the unsafe handling in SafeUnpickler; explo...

PT-2026-66558

SGLang contains an unauthenticated RCE in /load lora adapter from tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...