Deserialization Vulnerability in lmsys sglang by lmsys
CVE-2025-10164

6.9MEDIUM

Key Information:

Vendor

Lmsys

Status
Sglang
Vendor
CVE Published:
9 September 2025

What is CVE-2025-10164?

A security flaw in lmsys sglang 0.4.6 affects the 'main' function of the '/update_weights_from_tensor' file. An issue arises when the 'serialized_named_tensors' argument is manipulated, leading to deserialization vulnerabilities. This flaw allows remote attackers to exploit the system. Despite early notification to the vendor, there has been no acknowledgment or response, increasing the urgency for users to assess their security posture regarding this vulnerability.

Affected Version(s)

sglang 0.4.6

References

https://vuldb.com/?id.323203
vdb-entrytechnical-description
https://vuldb.com/?ctiid.323203
signaturepermissions-required
https://vuldb.com/?submit.635919
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

hl4x7eq28 (VulDB User)
.