Live › vulnerability › CVE-2026-111391
Go to dashboardSGLang, an LLM serving framework, has a code injection flaw in its dumper filter evaluation that lets remote attackers run Python code. An attacker escapes the eval() sandbox through re.search __globals__ and sends a crafted filter to an unauthenticated endpoint.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Check whether the environment variable DUMPER_SERVER_PORT is set on SGLang servers running versions 0.5.10 through 0.5.22.
Upgrade SGLang to a version newer than 0.5.22 if one is released, or unset DUMPER_SERVER_PORT and block network access to the dumper port.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.
This page as .md · .json · in your agent: get_signal("CVE-2026-111391")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.