Stuub/SGLang-0.5.9-RCE

Stuub/SGLang-0.5.9-RCE

GitHubGitHub
GitHubgithub.com
Releases0
Stars4
Proof of Concept exploitation of CVE-2026-5760 - RCE in SGLang 0.5.9 via malicious GGUF
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-5760↗
9.8 CRITICAL—

SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().