Security Advisory

CVE-2026-15969

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 18:09:21

Last updated 2026-07-31 17:37:45

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.

← Browse all CVEs View on cve.org ↗