CVE-2026-15969
Vulnerability Description
SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.
Vulnerability Details
Published Date
Last Modified
Source
NVD
Vendor
SGLang
Product
SGLang
Discussion (0)
Add Comment
No comments yet. Be the first!