Skip to content
OpenAdvisories

Vendor

SGLang

18 known vulnerabilities.

Products

SGLang 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-5760 Public exploit

    CVE-2026-5760

    SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

    SGLang SGLang