CVE-2026-15969
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Jul 30, 2026
Vendor
unknown
Description
SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitrary command execution through crafted base64-encoded pickle payloads.