PatchTheCVElmsys vulnerabilities
Recent CVEs affecting lmsys products. 7 tracked.
lmsys has 7 tracked vulnerabilities, 4 critical. A fixed release or vendor patch exists for 7. Most recent: 2026-07-30. Highest priority: CVE-2026-15969 (score 58/100).
- CVE-2026-14890 CRITICAL 9.1 UPGRADE SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interf
- CVE-2026-15969 CRITICAL 9.8 UPGRADE SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomp
- CVE-2026-15971 CRITICAL 9.8 UPGRADE SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox esc
- CVE-2026-15974 MEDIUM 6.5 UPGRADE SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to
- CVE-2026-15976 CRITICAL 9.8 UPGRADE SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, speci
- CVE-2026-15977 HIGH 7.5 UPGRADE SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys an
- CVE-2026-15978 HIGH 7.5 UPGRADE SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expo
FAQ
How do I fix lmsys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is lmsys being exploited right now?
None of the tracked lmsys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which lmsys CVE should I patch first?
CVE-2026-15969 currently ranks highest (58/100): SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomp.