CVE-2026-111391
CVE-2026-111391 · SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.
CVSS 9.2 · Crítica · EPSS 0,5%
- Publicación
- Actualización
Productos y versiones afectados
sglang
- Versiones
- ≥ 0.5.10, ≤ 0.5.22: Afectada (semver)
Sin corrección publicada
Fuentes originales
- https://github.com/sgl-project/sglang/issues/44188
- https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320
- https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401
- https://github.com/sgl-project/sglang
- https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter
- https://nvd.nist.gov/vuln/detail/CVE-2026-111391