High severity · published Oct 16, 2026
CVE-2026-111391
SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter
8.1
CVSS
0.5%
EPSS
No
On KEV
Description
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 39% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
sglang · sgl-project
0.5.10 through 0.5.22 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-111391
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-111391
github.com
https://github.com/sgl-project/sglang
github.com
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320
github.com
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401
github.com
https://github.com/sgl-project/sglang/issues/44188
www.vulncheck.com
https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter
More from sglang
8.6
CVE-2026-92972
SGLang through 0.5.19 Unauthenticated Route Poisoning via PUT endpoint
7.5
CVE-2026-112082
sgl-project SGLang Expert-Distribution Recording Endpoint expert_distribution.py Scheduler.expert_distribution_handle denial of service
7.5
CVE-2026-109229
SGLang through 0.5.21 Decompression Bomb DoS via NanoNemotronVLImageProcessor
7.5
CVE-2026-109228
SGLang through 0.5.21 Resource Budget Bypass via GLM-V Video Parameters
7.5
CVE-2026-109227
SGLang through 0.5.21 Memory Exhaustion DoS via Qwen-VL Video Preprocessing