CVE-2026-15969Disclosure(lmsys / sglang)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch lmsys sglang systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.

lmsys CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://thoughts.apoorvdayal.com/posts/sglang-disclosures/

Other references

https://github.com/sgl-project/sglang/security/advisories/GHSA-2wvm-gjg7-5jfm

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

sglang

Threat summary

Patch or workaround signal is available
7 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 7 signals
Disclosure: 6 classified signals
Peaked 3d ago at 3 mentions (2026-07-30); latest day: 1
7 total mentions across 4 days

Affected systems

Vendors

lmsys

Products

sglang

Deep dive

Activity timeline7 mentions / 4d

Signal classification2 categories

Disclosure

685.7%

Patch

114.3%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-30	3	Disclosure3
2026-08-04	1	Patch1
2026-08-05	2	Disclosure2
2026-08-06	1	Disclosure1

Full discourse7 posts

connect24h@connect24h87d
Patch
推論基盤の中枢に脆弱性。新たな攻撃面。公式が40万超GPUで稼働とするSGLangに6件。CVE-2026-15969／15971／15974／15976／15977／15978は、RCE、SSRFとlocal file read、credential漏えい、model weight流出まで揃い、多くが認証不要だ。特に`/v1/chat/completions`の`image_url`が内部metadataやsecretへの入口になるのが嫌らしい。CERT/CCの7/30公開時点でpatchなし。私の基盤は外部到達性を落とし、`SGLANG_USE_PICKLE_IPC=false`を当面の基準にする。外向き運用している組織、相当危ない。 #セキュリティソース: https://scan.netsecurity.ne.jp/article/2026/08/04/55852.html
Post summary
Six newly disclosed CVEs in SGLang allow RCE, SSRF and other data exfiltration attacks; no patch exists yet, so a workaround is recommended (disabling pickle IPC).
01021340
8.4K followersView on X
ThreatWire@ThreatWire_85d
Disclosure
🚨 Researchers disclosed six vulnerabilities affecting SGLang, including CVE-2026-15969, an unauthenticated RCE flaw. The issues could allow attackers to execute code remotely, steal sensitive data and LLM model weights. No security patch is currently available. #SGLang #AI #LLMSecurity #RCE #CVE #CyberSecurity #Infosec
Post summary
Researchers disclosed six SGLang vulnerabilities, including CVE-2026-15969, an unauthenticated remote code execution flaw; no patch is available yet.
01010374
644 followersView on X
OJOBIT@0J0BIT91d
Disclosure
CERT/CC disclosed six vulnerabilities in SGLang, an open-source LLM serving framework > CERT/CC published VU#281278 detailing six distinct CVEs: CVE-2026-15969 through CVE-2026-15978 > CVE-2026-15969 delivers unauthenticated RCE through /loadloraadapterfromtensors > CVE-2026-15971 triggers a sandbox escape when the optional dumper subsystem is enabled via DUMPERSERVERPORT; inference requests become code execution > CVE-2026-15974 is an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions - unsanitized image_url input leaks internal metadata > CVE-2026-15976 hits when loading model weights from a HuggingFace repository > CVE-2026-15977 exposes API keys and SSL keyfile information through the /server_info endpoint when only --admin-api-key is configured https://news.ojobit.com/story/sglangs-six-unpatched-bugs-open-rce-model-theft-and-credential-leaks-63e3d3
Post summary
CERT/CC announced six CVEs in the SGLang LLM framework, detailing several critical vulnerabilities—including unauthenticated RCE and credential exposure—yet no exploitation reports or patches are presented.
1001092
8 followersView on X
Daily CyberSecurity@Daily_CyberSec85d
Disclosure
Six SGLang vulnerabilities include unauthenticated RCE via CVE-2026-15969, plus data and model-weight theft. No patch exists yet. #SGLang #RCE #LLMSecurity #CVE202615969 #InfoSec http://securityonline.info/sglang-vulnerabilities/
Post summary
Several SGLang vulnerabilities, including an unauthenticated RCE via CVE‑2026‑15969, have been disclosed with no patch yet available.
00010409
12.6K followersView on X
キタきつね@foxbook85d
Disclosure
SGLangに6つの脆弱性が発見される（認証不要のリモートコード実行の脆弱性を含む）（CVE-2026-15969） SGLang Hit by Six Vulnerabilities, Including Unauthenticated RCE (CVE-2026-15969) #DailyCyberSecurity (Aug 5) https://securityonline.info/sglang-vulnerabilities/
Post summary
The article announces that SGLang has six discovered vulnerabilities, including an unauthenticated remote code execution flaw (CVE-2026-15969), but provides no PoC, exploit details, or patch information.
00000288
4.9K followersView on X
Infoflowcloud@infoflowcloud91d
Disclosure
🚨*CVE* CVE-2026-15969 SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution thro… https://www.cve.org/CVERecord?id=CVE-2026-15969 ----- Traducción: CVE-2026-15969 SGL… http://infoflow.cloud`
Post summary
The tweet announces CVE-2026-15969, describing an unauthenticated RCE in SGLang’s load_lora_adapter_from_tensors endpoint caused by a SafeUnpickler bypass, but offers no PoC, exploit, or patch information.
0000090
96 followersView on X
CVE@CVEnew91d
Disclosure
CVE-2026-15969 SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution thro… https://www.cve.org/CVERecord?id=CVE-2026-15969
Post summary
The tweet discloses a new unauthenticated remote code execution vulnerability in SGLang due to a SafeUnpickler bypass.
00000728
57.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	lmsys	sglang	-	-	-

Explore more

Back to dashboard lmsys CVEs sglang vulnerabilities

What researchers are saying

CVE-2026-15969

connect24h[verified]@connect24hPatch

Six newly disclosed CVEs in SGLang allow RCE, SSRF and other data exfiltration attacks; no patch exists yet, so a workaround is recommended (disabling pickle IPC).

ThreatWire[verified]@ThreatWire_Disclosure

Researchers disclosed six SGLang vulnerabilities, including CVE-2026-15969, an unauthenticated remote code execution flaw; no patch is available yet.

OJOBIT[verified]@0J0BITDisclosure

CERT/CC announced six CVEs in the SGLang LLM framework, detailing several critical vulnerabilities—including unauthenticated RCE and credential exposure—yet no exploitation reports or patches are presented.

キタきつね[verified]@foxbookDisclosure

The article announces that SGLang has six discovered vulnerabilities, including an unauthenticated remote code execution flaw (CVE-2026-15969), but provides no PoC, exploit details, or patch information.

Daily CyberSecurity@Daily_CyberSecDisclosure

Several SGLang vulnerabilities, including an unauthenticated RCE via CVE‑2026‑15969, have been disclosed with no patch yet available.

Infoflowcloud@infoflowcloudDisclosure

The tweet announces CVE-2026-15969, describing an unauthenticated RCE in SGLang’s load_lora_adapter_from_tensors endpoint caused by a SafeUnpickler bypass, but offers no PoC, exploit, or patch information.

CVE@CVEnewDisclosure

The tweet discloses a new unauthenticated remote code execution vulnerability in SGLang due to a SafeUnpickler bypass.