Remote Code Execution Vulnerability in SGLang Product by an Open Source Vendor
CVE-2026-15976

9.8CRITICAL

Key Information:

Vendor

Sglang

Status
Sglang
Vendor
CVE Published:
30 July 2026

What is CVE-2026-15976?

The SGLang product contains a critical vulnerability that allows remote code execution when loading model weights from a HuggingFace repository. This occurs specifically in the /update_weights_from_disk function, where the fallback mechanism uses 'torch.load(..., weights_only=False)' for deserialization of .bin files. This flaw can potentially allow an attacker to execute arbitrary code on the host system by manipulating the data loaded from the external source.

Affected Version(s)

SGLang 0

References

https://github.com/sgl-project/sglang/security/advisories...
https://thoughts.apoorvdayal.com/posts/sglang-disclosures/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.