Remote Code Execution Vulnerability in SGLang by Stuub
CVE-2026-5760

9.8CRITICAL

Key Information:

Vendor

Sglang

Status
Sglang
Vendor
CVE Published:
20 April 2026

What is CVE-2026-5760?

The reranking endpoint of SGLang allows for execution of arbitrary code when a model file containing a malicious tokenizer.chat_template is loaded. This occurs due to the rendering of Jinja2 chat templates in an unsandboxed environment, leading to potential exploitation if an attacker can manipulate the model input.

Affected Version(s)

SGLang 0.59

References

https://github.com/Stuub/SGLang-0.5.9-RCE

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.