Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · SGLang

CVE-2026-7302: SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

criticalCVSS 3.1 9.1GHSA-qwrp-wghp-94q2

SGLang's multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

Published May 18, 2026 · Updated May 29, 2026

Affected packages

sglang

Ecosystem
PyPI
Affected
>= 0.5.5, <= 0.5.12
Fixed in
No patched version yet
Check
pip show sglang

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

SGLang's multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More SGLang vulnerabilities

All SGLang entries