Skip to content
Noroxi

lmsys records

15 published records for vendor lmsys.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
9
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2026-3059
    39Monitor

    SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untr

    CriticalCVSS 9.8No exploitEPSS 1%

    lmsys · sglangMar 12, 2026

  • CVE-2026-3060
    39Monitor

    SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, whi

    CriticalCVSS 9.8No exploitEPSS 1%

    lmsys · sglangMar 12, 2026

  • CVE-2026-15969
    39Monitor

    SGLang contains an unauthenticated RCE in /load_lora_adapter_from_tensors via bypass of SafeUnpickler’s incomplete denylist, allowing arbitr

    CriticalCVSS 9.8No exploitEPSS 1%

    lmsys · sglangJul 30, 2026

  • CVE-2026-5760
    39Monitor

    SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_templat

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    lmsys · sglangApr 20, 2026

  • CVE-2026-15971
    39Monitor

    SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is

    CriticalCVSS 9.8No exploitEPSS 0%

    lmsys · sglangJul 30, 2026

  • CVE-2026-15976
    39Monitor

    SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /update_wei

    CriticalCVSS 9.8No exploitEPSS 0%

    lmsys · sglangJul 30, 2026

  • CVE-2026-7304
    39Monitor

    SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option

    CriticalCVSS 9.8No exploitEPSS 0%

    lmsys · sglangMay 18, 2026

  • CVE-2026-7301
    39Monitor

    SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on

    CriticalCVSS 9.8No exploitEPSS 0%

    lmsys · sglangMay 18, 2026

  • CVE-2026-14890
    36Monitor

    SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain auth

    CriticalCVSS 9.1No exploitEPSS 0%

    lmsys · sglangJul 16, 2026

  • CVE-2026-7302
    36Monitor

    SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitr

    CriticalCVSS 9.1No exploitEPSS 0%

    lmsys · sglangMay 18, 2026

  • CVE-2026-3989
    31Monitor

    SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization.

    HighCVSS 7.8No exploitEPSS 0%

    lmsys · sglangMar 12, 2026

  • CVE-2026-15978
    30Monitor

    SGLang contains a model weight exfiltration vulnerability when no API keys are configured, as SGLang will expose two endpoints that allow a

    HighCVSS 7.5No exploitEPSS 0%

    lmsys · sglangJul 30, 2026

  • CVE-2026-15977
    30Monitor

    SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when

    HighCVSS 7.5No exploitEPSS 0%

    lmsys · sglangJul 30, 2026

  • CVE-2026-15974
    26Monitor

    SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowin

    MediumCVSS 6.5No exploitEPSS 0%

    lmsys · sglangJul 30, 2026

  • CVE-2026-10775
    4Monitor

    sgl-project SGLang Cache data_hash denial of service

    LowCVSS 1.1No exploitEPSS 0%

    lmsys · sglangJun 3, 2026