https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-15978.htmlhttps://patchthecve.com/cve/CVE-2026-15978.htmlTue, 04 Aug 2026 20:40:54 +0000HIGH 7.5: SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a remote attacker to trigger distributed weight broadcasting using NCCL and then triggering data transfer, attackers can exfiltrate all model weights.https://patchthecve.com/cve/CVE-2026-15977.htmlhttps://patchthecve.com/cve/CVE-2026-15977.htmlTue, 04 Aug 2026 20:41:20 +0000HIGH 7.5: SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.https://patchthecve.com/cve/CVE-2026-15976.htmlhttps://patchthecve.com/cve/CVE-2026-15976.htmlTue, 04 Aug 2026 20:41:43 +0000CRITICAL 9.8: SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_weights_from_disk, where torch.load(..., weights_only=False) fallback enables pickle deserialization of .bin files.https://patchthecve.com/cve/CVE-2026-15974.htmlhttps://patchthecve.com/cve/CVE-2026-15974.htmlTue, 04 Aug 2026 20:42:09 +0000MEDIUM 6.5: SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.https://patchthecve.com/cve/CVE-2026-15971.htmlhttps://patchthecve.com/cve/CVE-2026-15971.htmlTue, 04 Aug 2026 20:42:42 +0000CRITICAL 9.8: SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.https://patchthecve.com/cve/CVE-2026-15969.htmlhttps://patchthecve.com/cve/CVE-2026-15969.htmlTue, 04 Aug 2026 20:43:06 +0000CRITICAL 9.8: SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.https://patchthecve.com/cve/CVE-2026-14890.htmlhttps://patchthecve.com/cve/CVE-2026-14890.htmlMon, 10 Aug 2026 14:13:13 +0000CRITICAL 9.1: SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file that results in unauthenticated remote code execution when the