Vulnerability · Published Oct 16, 2026 · Assigned by VulnCheck

CVE-2026-111391SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter

High 8.1

In plain English

A high-severity security flaw in sglang from sgl-project. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 39% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.5%top 60.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.

Affected products (as reported)

Vendor	Product	Versions
sgl-project	sglang	0.5.10 – through 0.5.22

Weakness: CWE-95 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://github.com/sgl-project/sglang/issues/44188 issue-tracking
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320 technical-description
https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401 technical-description
https://github.com/sgl-project/sglang product
VulnCheck Advisory: SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter third-party-advisory