CVE-2026-15976

Published: Jul 30, 2026Modified: Aug 4, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.

Affected (1)

Products: Lmsys: Sglang

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lmsys Sglang	Up to 0.5.15

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (3)

https://github.com/sgl-project/sglang/security/advisories/GHSA-wf98-gv64-5wrf

Source: cret@cert.org

Broken Link

https://thoughts.apoorvdayal.com/posts/sglang-disclosures/

Source: cret@cert.org

Third Party AdvisoryMitigation

https://thoughts.apoorvdayal.com/posts/sglang-disclosures/

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Third Party AdvisoryMitigation

Timeline

No history available yet.