CVE-2026-7304

Critical

Published: 18/05/2026(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled. Python objects loaded via dill.loads() will be deserialized without validation.

Risk Assessment

Exploitation of this vulnerability could lead to remote execution of malicious code, posing a serious threat to the security of the system and the organization's data.

Recommendation

It is recommended to disable the --enable-custom-logit-processor option and conduct a code audit to identify and eliminate potential threats.

Other vulnerabilities in SGLangs multimodal generation runtime

CVE-2026-7302Critical
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access by including ../ sequences in the upload filename when sent to specific endpoints.

Original NVD description (English source)

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS