CVE-2026-15977

SGLang has a credential leakage vulnerability in the /server_info endpoint. When only the --admin-api-key is configured, requests to /server_info return API keys and SSL keyfile information. Affected component: SGLang; vulnerable behavior: leakage of credentials and keyfile details. Evidence is p...