CVE-2026-15976

Name of the Vulnerable Software and Affected Versions SGLang (affected versions not specified)

Description Remote Code Execution is possible when loading model weights from a HuggingFace repository. The issue occurs at the '/update weights from disk' endpoint, where a fallback to torch.load(..., weights only=False) allows the deserialization of malicious .bin files via pickle, a process that converts a byte stream back into an object, which can be abused to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.