Vulnerabilities for sglang

First version without a known vulnerability: 0.5.12.post1

Details

• GHSA-jrcc-j37m-v8fg2026-06-04

  SGLang is Vulnerable to DoS via the data_hash Function

• GHSA-m2jr-x4gq-5rmj2026-06-02

  SGLang: Reachable Assertion via  lora_path  in LoRAManager enables remote Denial of Dervice

• GHSA-36m8-w8qf-g76p2026-05-18

  SGLang: Unauthenticated RCE via --enable-custom-logit-processor

• GHSA-gwv6-pq6m-p3rq2026-05-18

  SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

• GHSA-qwrp-wghp-94q22026-05-18

  SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

• GHSA-6m5f-673f-5vh72026-05-03

  SGLang has an Improper Input Validation/Injection Issue

• GHSA-hvwj-8w5g-28rg2026-03-12

  SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

  Fixed in: 0.5.10

• GHSA-jx93-g359-86wm2026-03-12

  SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

  Fixed in: 0.5.10

• GHSA-rgq9-fqf5-fv582026-03-12

  SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

  Fixed in: 0.5.10

• GHSA-9w53-xr52-mwgj2025-09-09

  SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor

  Fixed in: 0.5.4