Remote Code Execution Vulnerability in SGLang by Stuub
CVE-2026-5760

9.8CRITICAL

Key Information:

Vendor

Sglang

Status
Sglang
Vendor
CVE Published:
20 April 2026

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2026-5760?

The reranking endpoint of SGLang allows for execution of arbitrary code when a model file containing a malicious tokenizer.chat_template is loaded. This occurs due to the rendering of Jinja2 chat templates in an unsandboxed environment, leading to potential exploitation if an attacker can manipulate the model input.

Affected Version(s)

SGLang 8f3097e

News Articles

favicon imageThe Hacker News

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

CVE-2026-5760 (CVSS 9.8) exposes SGLang via /v1/rerank endpoint, enabling RCE through malicious GGUF models, risking server compromise.

References

https://github.com/Stuub/SGLang-0.5.9-RCE
https://github.com/sgl-project/sglang/pull/23660

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by The Hacker News

  • Vulnerability published

  • Vulnerability Reserved

.