CVE-2026-15969
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk59th percentile - higher than 59% of all known CVEs
Summary
SGLang contains an unauthenticated remote code execution (RCE) vulnerability in the /load_lora_adapter_from_tensors endpoint. It bypasses SafeUnpickler's incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.
Risk Assessment
An unauthenticated attacker can remotely execute arbitrary code on the server, leading to full system compromise and potential data theft.
Recommendation
Immediately update SGLang to a version with a complete SafeUnpickler denylist or disable the /load_lora_adapter_from_tensors endpoint.
Original NVD description (English source)
SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.