CVE-2026-7302

Published: May 18, 2026Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

Affected (1)

Products: Lmsys: Sglang

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lmsys Sglang	Version 0.5.10

Related CWEs

Path Traversal: '.../...//'

The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.

References (2)

https://antiproof.ai/blog/three-rces-in-sglang/

Source: cret@cert.org

Permissions Required

https://github.com/sgl-project/sglang/tree/main/python/sglang

Source: cret@cert.org

Product

Timeline

No history available yet.