CERT/CC disclosed six vulnerabilities in SGLang, an open-source LLM serving framework > CERT/CC published VU#281278 detailing six distinct CVEs: CVE-2026-15969 through CVE-2026-15978 > CVE-2026-15969 delivers unauthenticated RCE through /loadloraadapterfromtensors > CVE-2026-15971 triggers a sandbox escape when the optional dumper subsystem is enabled via DUMPERSERVERPORT; inference requests become code execution > CVE-2026-15974 is an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions - unsanitized image_url input leaks internal metadata > CVE-2026-15976 hits when loading model weights from a HuggingFace repository > CVE-2026-15977 exposes API keys and SSL keyfile information through the /server_info endpoint when only --admin-api-key is configured https://news.ojobit.com/story/sglangs-six-unpatched-bugs-open-rce-model-theft-and-credential-leaks-63e3d3
Post summary
The article announces six new CVEs in SGLang, detailing the types of exploitation but offers no PoCs, active exploitation evidence, or patches.