Vulnerabilidades do Lmsys Sglang

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Lmsys Sglang: 8 registro(s), com versões afetadas e correções.
cpe:2.3:a:lmsys:sglang

CVE-2026-10775 Média · 5.3 CWE-404 03/06/2026

sgl-project SGLang Cache data_hash denial of service

A vulnerability was determined in sgl-project SGLang up to 0.5.11. Affected by this vulnerability is the function data_hash of the component Cache Handler. This manipulation causes denial of service. The attack is restricted to local execution. A high degree of complexity is needed for the attack. The exploitation appears to be difficult. The exploit has been publicly disclosed and may be utilized. The pull request to fix this issue awaits acceptance.

CVE-2026-7304 Crítica · 9.8 CWE-502 18/05/2026

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

CVE-2026-7302 Crítica · 9.1 CWE-35 18/05/2026

SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

CVE-2026-7301 Crítica · 9.8 CWE-502 18/05/2026

SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

CVE-2026-5760 Crítica · 9.8 CWE-94 20/04/2026

SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

CVE-2026-3989 Alta · 7.8 CWE-502 12/03/2026

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

CVE-2026-3060 Crítica · 9.8 CWE-502 12/03/2026

SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

CVE-2026-3059 Crítica · 9.8 CWE-502 12/03/2026

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.