CVE-2026-15969

Name of the Vulnerable Software and Affected Versions SGLang (affected versions not specified)

Description An unauthenticated remote code execution issue exists in the '/load lora adapter from tensors' endpoint. This occurs due to a bypass of the SafeUnpickler's incomplete denylist, which allows an attacker to execute arbitrary commands by providing crafted base64-encoded pickle payloads. Pickle is a Python module used for serializing and deserializing objects.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the '/load lora adapter from tensors' endpoint until the issue is resolved.