CVE-2026-111391
SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter
CVSS Score
8.1
EPSS Score
0.0%
EPSS Percentile
0th
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.
| CWE | CWE-95 |
| Vendor | sgl-project |
| Product | sglang |
| Published | Oct 16, 2026 |
Stay Ahead of the Next One
Get instant alerts for sgl-project sglang
Be the first to know when new high vulnerabilities affecting sgl-project sglang are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
sgl-project / sglang
0.5.10 ≤ 0.5.22
References
github.com: https://github.com/sgl-project/sglang/issues/44188 github.com: https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320 github.com: https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401 github.com: https://github.com/sgl-project/sglang vulncheck.com: https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter
Credits
Jiapeng Li Jiajia Liu Qiang Fu Jiadai Wang