Description
SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SGLang | SGLang | ≤ v0.5.15 | — |