AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

SGLangGHSA-36m8-w8qf-g76p

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLang

CVE-2026-7304 · Published May 18, 2026 · updated Jun 29, 2026

Critical9.8
No fix yet
GitHub advisory

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

Affected versions

PackageAffectedFixed in
sglang
PyPI
>= 0.4.1.post7, <= 0.5.12No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity from
GitHub (reviewed advisory)
Weakness
CWE-502
Also known as
CVE-2026-7304, PYSEC-2026-535

More SGLang advisories

All SGLang
Low 3.6Jun 4SGLang is Vulnerable to DoS via the data_hash FunctionCVE-2026-10775no fix yetLow 3.7Jun 2SGLang: Reachable Assertion via lora_path in LoRAManager enables remote Denial of DerviceCVE-2026-10300no fix yetCritical 9.8May 18SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socketCVE-2026-7301no fix yetCritical 9.1May 18SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerabilityCVE-2026-7302no fix yetMedium 5.6May 3SGLang has an Improper Input Validation/Injection IssueCVE-2026-7669no fix yetHigh 7.8Mar 12SGLang: unsafe deserializationCVE-2026-3989fixed in 0.5.10