CVE-2026-15976
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
SGLang contains a remote code execution (RCE) vulnerability when loading model weights from a HuggingFace repository. In the /update_weights_from_disk endpoint, torch.load with weights_only=False allows pickle deserialization of .bin files.
Risk Assessment
An attacker can remotely execute arbitrary code on the server, leading to full system compromise and potential data loss.
Recommendation
Update SGLang to a version that uses safer deserialization or disable loading weights from external repositories.
Original NVD description (English source)
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.