CVE-2026-15971

Mô tả

Tham khảo

• sgl-project/sglang security advisory · Broken Link
• thoughts.apoorvdayal.com/posts/sglang-disclosures · Third Party Advisory

Lỗ hổng khác của sglang

• CVE-2026-15978CAO 7.5SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a …
• CVE-2026-15977CAO 7.5SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when…
• CVE-2026-15976NGHIÊM TRỌNG 9.8SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_wei…
• CVE-2026-15974TRUNG BÌNH 6.5SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowin…
• CVE-2026-15969NGHIÊM TRỌNG 9.8SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitr…