Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-111391

SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

Published
Last modified
Status
published
Known exploitation
Not listed in CISA KEV
Public exploit
None on Exploit-DB
CISA SSVC
  • Exploitation: poc
  • Automatable: no
  • Technical impact: total
?

Decision points from CISA's Vulnrichment, assessed (SSVC 2.0.3).

SSVC documentation

Summary

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.

Affected versions

  • sgl-project sglang

    From 0.5.10 · through 0.5.22

References 5

GitHub · sgl-project/sglang

vulncheck.com