SGLang Hit by Six Vulnerabilities, Including Unauthenticated RCE (CVE-2026-15969)

TL;DR

A researcher found six SGLang vulnerabilities, and the worst allow unauthenticated remote code execution. SGLang serves large language models such as DeepSeek and Qwen. CERT/CC published the advisory on July 30, 2026. No patch exists yet, and the maintainers have not responded.

Notable CVEs

Why it matters

SGLang runs inference for popular open models. Many teams expose it as an API service. An unauthenticated flaw therefore hands attackers a direct path to the host. CERT/CC notes that “exploitation does not require authentication in most cases.” So any internet-facing instance faces serious risk.

How the attacks work

Three of the SGLang vulnerabilities lead to remote code execution. CVE-2026-15969 abuses a weak unpickling denylist to run commands through crafted payloads. CVE-2026-15976 triggers unsafe pickle deserialization when loading model weights. CVE-2026-15971 enables code execution through an optional dumper subsystem.

The other three expose data. CVE-2026-15974 is an SSRF and local file read that can reach “internal metadata, secrets, and services.” Next, CVE-2026-15977 leaks API keys through the server-info endpoint. Finally, CVE-2026-15978 lets a remote attacker exfiltrate entire model weights.

Affected versions

The flaws affect current SGLang builds where the vulnerable endpoints are reachable. CERT/CC lists no fixed release, because no patch is available.

Exploitation status and mitigation

No in-the-wild exploitation has been reported. However, full technical details are now public, which raises the risk. Since no fix exists, act on the workarounds in the CERT/CC advisory. First, restrict access to the service and keep it off untrusted networks. Also set the pickle IPC option to “false” in environ.py, and disable endpoints you do not use.

Support Our Threat Intelligence

If you find our CVE report and cybersecurity news helpful, consider supporting our work.

Buy Me a Coffee PayPal

Crypto

USDT (TRC20):

TN8BdV8cp4T1Cd28gK9qTAnZknzzuwyUtm Copy

USDT (ERC20):

0x3725e1a7d3bc5765499fa6aaafe307fabcd75bce Copy

Written by

@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.