Security advisories

low2026-06-04

CVE-2026-10775-SGLang is Vulnerable to DoS via the data_hash Function

GHSA-jrcc-j37m-v8fg

low2026-06-02

CVE-2026-10300-SGLang: Reachable Assertion via  lora_path  in LoRAManager enables remote Denial of Dervice

GHSA-m2jr-x4gq-5rmj

critical2026-05-18

CVE-2026-7302-SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

GHSA-qwrp-wghp-94q2

critical2026-05-18

CVE-2026-7301-SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

GHSA-gwv6-pq6m-p3rq

critical2026-05-18

CVE-2026-7304-SGLang: Unauthenticated RCE via --enable-custom-logit-processor

GHSA-36m8-w8qf-g76p

medium2026-05-03

CVE-2026-7669-SGLang has an Improper Input Validation/Injection Issue

GHSA-6m5f-673f-5vh7

critical2026-03-12

CVE-2026-3059-SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

GHSA-rgq9-fqf5-fv58

critical2026-03-12

CVE-2026-3060-SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

GHSA-jx93-g359-86wm

high2026-03-12

CVE-2026-3989-SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

GHSA-hvwj-8w5g-28rg

medium2025-09-09

CVE-2025-10164-SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor

GHSA-9w53-xr52-mwgj