How severe is CVE-2026-15971?

CVE-2026-15971 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.

Is CVE-2026-15971 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2026-15971?

CVE-2026-15971 affects Lmsys Sglang. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2026-15971?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2026-15971 published?

CVE-2026-15971 was published on 2026-07-30 and last updated on 2026-08-04.

CVE-2026-15971

CVE-2026-15971 is a critical-severity vulnerability in Lmsys Sglang with a CVSS 3.x base score of 9.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-95.

Key facts

Severity: Critical (CVSS 3.x base score 9.8)
EPSS exploit prediction: 0% (34th percentile)
Actively exploited: Not listed in CISA KEV
Weakness: CWE-95
Affected product: Lmsys Sglang
Published: 2026-07-30
Last modified: 2026-08-04

Description

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.

Frequently asked questions

What is CVE-2026-15971?: SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.
How severe is CVE-2026-15971?: CVE-2026-15971 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
Is CVE-2026-15971 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2026-15971?: CVE-2026-15971 affects Lmsys Sglang. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2026-15971?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
When was CVE-2026-15971 published?: CVE-2026-15971 was published on 2026-07-30 and last updated on 2026-08-04.

References

Affected products (1)

cpe:2.3:a:lmsys:sglang:*:*:*:*:*:*:*:*

More vulnerabilities in Lmsys Sglang

CVE-2026-15976 — Critical (CVSS 9.8): SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically…
CVE-2026-15969 — Critical (CVSS 9.8): SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete…
CVE-2026-7304 — Critical (CVSS 9.8): SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the…
CVE-2026-7301 — Critical (CVSS 9.8): SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that…
CVE-2026-5760 — Critical (CVSS 9.8): SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious…
CVE-2026-3060 — Critical (CVSS 9.8): SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the…

All CVEs affecting Lmsys Sglang →

Other CWE-95 (Eval Injection) vulnerabilities

CVE-2026-61539 — Critical (CVSS 10.0): Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference…
CVE-2026-44643 — Critical (CVSS 10.0): Angular Expressions provides expressions for the Angular.JS web framework as a standalone module. Prior to 1.5.2, an…
CVE-2025-68271 — Critical (CVSS 10.0): OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.…
CVE-2013-10070 — Critical (CVSS 10.0): PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names…
CVE-2022-36010 — Critical (CVSS 10.0): This library allows strings to be parsed as functions and stored as a specialized component,…
CVE-2026-77810 — Critical (CVSS 9.9): In the Neptune connector, a user with access to Neptune through Athena Federated Query could gain access to properties…

Browse all CWE-95 (Eval Injection) vulnerabilities →