PT-2026-115584 · Sgl · Sglang
CVSS v3.1
8.1
High
| Vector | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluate filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search globals . Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER SERVER PORT is set, running code in the scheduler process on the next forward pass.
Fix
Eval Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sglang