PT-2026-41670 · Sglang · Sglang

Published 2026-05-18 · Updated 2026-06-09 · CVE-2026-7304

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SGLang (affected versions not specified)

Description The multimodal generation runtime allows unauthenticated remote code execution when the --enable-custom-logit-processor option is active. This occurs because Python objects loaded through the dill.loads() function are deserialized without proper validation.

Recommendations As a temporary workaround, disable the --enable-custom-logit-processor option to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2026-7304

GHSA-36M8-W8QF-G76P

Affected Products

Sglang

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-7304 · Security Note
• https://osv.dev/vulnerability/GHSA-36m8-w8qf-g76p · Vendor Advisory
• https://github.com/sgl-project/sglang/tree/main/python/sglang · Note
• https://github.com/sgl-project/sglang · Note
• https://twitter.com/Dinosn/status/2064180425241579938 · Twitter Post
• https://twitter.com/CVEarity/status/2056408864543879569 · Twitter Post
• https://twitter.com/UpwindMDR/status/2056412796644909256 · Twitter Post
• https://t.me/CVEtracker/54130 · Telegram Post
• https://antiproof.ai/blog/three-rces-in-sglang · Note
• https://t.me/cveNotify/164010 · Telegram Post