CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

CVE-2026-15978

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

CVE-2026-15974

SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized imageurl, allowing access to internal metadata, secrets, and services...

CVE-2026-15969

SGLang (CVE-2026-15969) exposes an unauthenticated RCE via /load_lora_adapter_from_tensors caused by bypassing SafeUnpickler’s incomplete denylist, enabling arbitrary command execution through crafted base64-encoded pickle payloads. Multiple sources confirm the vulnerability and its impact on SGL...

CVE-2026-15969 CVE-2026-15969

SGLang contains an unauthenticated RCE in /loadloraadapterfromtensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads...

CVE-2026-15978

SGLang (vaguely referenced in CVE-2026-15978) contains a model weight exfiltration vulnerability that is exploitable when no API keys are configured. The vulnerability arises because SGLang exposes two endpoints that can trigger distributed weight broadcasting via NCCL and then data transfer, all...

CVE-2026-15978 CVE-2026-15978

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

EUVD-2026-51266

SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights...

EUVD-2026-51264

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

CVE-2026-15976

CVE-2026-15976 affects SGLang. The vulnerability is an RCE that occurs when loading model weights from a HuggingFace repository via the /update_weights_from_disk path, where torch.load(..., weights_only=False) may deserialize pickle payloads from .bin files. This is tied to the pickle-deserializa...

CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

CVE-2026-15976 CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

CVE-2026-15976 CVE-2026-15976

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load..., weightsonly=False fallback enables pickle deserialization of .bin files...

CVE-2026-15974

SGLang (CVE-2026-15974) has a documented SSRF and local file-read flaw in the multimodal generation endpoint /v1/chat/completions caused by unsanitized image_url, enabling access to internal metadata, secrets, and services. The connected sources confirm the vulnerability details but do not provid...

CVE-2026-15971 CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

EUVD-2026-51262

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

CVE-2026-15971

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPERSERVERPORT is set, enabling code execution on inference requests...

CVE-2026-15971

SGLang contains a remote code execution vulnerability (CVE-2026-15971) that triggers when the optional dumper subsystem is enabled. The root cause is a sandbox escape via DUMPER_SERVER_PORT, enabling code execution on inference requests. Multiple sources (NVD, CVE lists, OSV, etc.) consistently d...