CVE-2026-5760
CVE-2026-5760
9.8
CriticalPublished:
Last updated:
Source:cret@cert.org
Analyzed
Weakness (CWE)
CVSS Vector
v3.1- Attack Vector
- Network
- Attack Complexity
- Low
- Privileges Required
- None
- User Interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Description
SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().
References
cret@cert.org
https://github.com/Stuub/SGLang-0.5.9-RCEcret@cert.org
https://github.com/sgl-project/sglang/pull/23660af854a3a-2127-422b-91ae-364da2661108
https://www.kb.cert.org/vuls/id/915947