VulnSocial

CVE-2026-111391

LOWCVSS 9.2 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-95

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-10-16: 110-16
Referenced assets1 URL
Full discourse1 post
  • Severity Daily@severitydaily

    The only public fix for an unauthenticated RCE in SGLang was closed unmerged when the maintainer blocked the account that filed it. The eval() is still on main. No exploitation reported. https://severitydaily.com/sglang-cve-2026-111391-dumper-filter-eval-no-fixed-version-fix-pr-closed-unmerged/

    0001036
    33 followersView on X

Explore more

Back to dashboard