SGLang vulnerabilities and CVEs
The Beam CVE database tracks 10 security advisories for SGLang: 5 critical, 1 high, 2 medium and 2 low severity. The newest is CVE-2026-10775, published Jun 4, 2026.
A serving framework for LLMs and vision-language models.
Check your version: pip show sglang
- Vulnerabilities tracked
- 10
- Critical
- 5
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-10775
SGLang is Vulnerable to DoS via the data_hash Function
low3.6No fixJun 4, 2026CVE-2026-10300
SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of Dervice
low3.7No fixJun 2, 2026CVE-2026-7301
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket
critical9.8No fixMay 18, 2026CVE-2026-7302
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability
critical9.1No fixMay 18, 2026CVE-2026-7304
SGLang: Unauthenticated RCE via --enable-custom-logit-processor
critical9.8No fixMay 18, 2026CVE-2026-7669
SGLang has an Improper Input Validation/Injection Issue
medium5.6No fixMay 3, 2026CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
critical9.8Mar 12, 2026CVE-2026-3060
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module
critical9.8Mar 12, 2026CVE-2026-3989
SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization
high7.8Mar 12, 2026CVE-2025-10164
SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor
medium7.3Sep 9, 2025