CVE-2026-111391

Name of the Vulnerable Software and Affected Versions SGLang versions 0.5.10 through 0.5.22

Description A code injection issue exists in the evaluate filter() function. Remote attackers can execute Python code by escaping the eval() sandbox using re.search globals . This is possible by sending a crafted filter expression to the unauthenticated '/dumper/configure' endpoint when the DUMPER SERVER PORT variable is set, which results in code execution within the scheduler process during the subsequent forward pass.

Recommendations Update SGLang to a version later than 0.5.22. As a temporary mitigation, avoid setting the DUMPER SERVER PORT variable or restrict access to the '/dumper/configure' endpoint.