CVE-2026-15969

Analyzed Analyzed - Analysis Complete

Unauthenticated RCE in SGLang via Pickle Payload

Publication date: 2026-07-30

Last updated on: 2026-08-04

Assigner: CERT/CC

Description

SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-30

Last Modified

2026-08-04

Generated

2026-08-20

AI Q&A

2026-07-31

EPSS Evaluated

2026-08-19

NVD

CVE-2026-15969

EUVD

EUVD-2026-51267

Affected Vendors & Products

Vendor	Product	Version / Range
lmsys	sglang	to 0.5.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-502	The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

Attack-Flow Graph

Executive Summary

SGLang has an unauthenticated remote code execution vulnerability in the /load_lora_adapter_from_tensors endpoint. It allows attackers to bypass SafeUnpickler's incomplete denylist and execute arbitrary commands using crafted base64-encoded pickle payloads.

Detection Guidance

Detecting this vulnerability requires monitoring for unusual network traffic or processes related to SGLang and pickle payloads. Check for unexpected base64-encoded data in logs or network requests targeting /load_lora_adapter_from_tensors. Inspect running processes for unauthorized command execution or unusual child processes spawned by SGLang.

Impact Analysis

This vulnerability allows attackers to remotely execute arbitrary code on your system without authentication. This could lead to full system compromise, data theft, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance requirements. Organizations may face legal penalties, data breach notifications, and reputational damage.

Mitigation Strategies

Immediately restrict access to /load_lora_adapter_from_tensors by implementing authentication and input validation. Disable unpickling of untrusted data or replace SafeUnpickler with a stricter deserialization method. Update SGLang to the latest patched version if available. Monitor for signs of exploitation and isolate affected systems.

Hi! I’m here to help you understand CVE-2026-15969. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70