Code Injection Vulnerability in SGLang by SGL Project
CVE-2026-111391
9.2CRITICAL
What is CVE-2026-111391?
SGLang versions 0.5.10 to 0.5.22 are susceptible to a code injection vulnerability in the _evaluate_filter() function. This issue enables remote attackers to bypass the eval() sandbox by exploiting re.search globals, allowing them to execute arbitrary Python code. The flaw is accessible through the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is enabled, potentially executing unauthorized code within the scheduler process during subsequent operations.
Affected Version(s)
sglang 0.5.10 <= 0.5.22
References
CVSS V4
Score:
9.2
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Jiapeng Li
Jiajia Liu
Qiang Fu
Jiadai Wang