CVE-2026-15976 Details
Description
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.
A remote code execution vulnerability exists in SGLang when loading model weights from a HuggingFace repository. This issue arises in the '/update_weights_from_disk' route, where the 'torch.load' function, with 'weights_only' set to false, allows pickle deserialization of '.bin' files. The vulnerability is present in SGLang version 0.5.10.post1.
Until a fixed version is released, SGLang can be bound to loopback or a private service network, preventing exposure of the management surface to the internet. Additionally, the 'SGLANG_USE_PICKLE_IPC' environment variable should be set to 'false' where compatible with the deployment.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Jul 31, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://thoughts.apoorvdayal.com/posts/sglang-disclosures/ | CISA-ADP | Third Party AdvisoryMitigation |
| https://github.com/sgl-project/sglang/security/advisories/GHSA-wf98-gv64-5wrf | [email protected] | Broken Link |
| https://thoughts.apoorvdayal.com/posts/sglang-disclosures/ | [email protected] | Third Party AdvisoryMitigation |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| lmsys sglang | <= 0.5.15 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 4, 2026 | Initial Analysis | [email protected] |
| Jul 31, 2026 | CVE Modified | CISA-ADP |
| Jul 30, 2026 | New CVE Received | [email protected] |