Critical Security Vulnerability in SGLang Enables Remote Code Execution

📌 A critical security vulnerability in SGLang, tracked as CVE-2026-5760 with a CVSS score of 9.8, enables remote code execution on vulnerable systems. The flaw is classified as a command injection issue, allowing arbitrary code execution when exploited. SGLang is identified as a high-performance, open-source serving framework, though the exact affected versions or deployment scope are not specified. No disclosure date or patch availability is mentioned in the reported details. The impact is limited to systems processing malicious GGUF model files via the vulnerable component.