CVE-2026-111391

8.1High

Published 16 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash

8.1High

Attack vector: Network
Complexity: High
Privileges needed: None
User interaction: None
Impact: Full C/I/A compromise
Weakness: CWE-95

Impact

Remote unauthenticated attackers can execute arbitrary Python code inside the scheduler process. This requires network access to the /dumper/configure endpoint when DUMPER_SERVER_PORT is enabled.

Root cause

The _evaluate_filter() function uses eval() insecurely, allowing sandbox escapes via re.search __globals__ inside user-supplied filter expressions.

Affected systems

SGLang 0.5.10 through 0.5.22

CVSS v3.1 · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Fix & remediation

Upgrade SGLang past version 0.5.22 once available. As an immediate mitigation, unset or disable the DUMPER_SERVER_PORT environment variable and block external traffic to the dumper port.

shell

$ pip install --upgrade sglang

AI-suggested. Run it in staging first and check it against the vendor advisory. Why?

Ad · In-content banner

NVD description

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.

References

Source: nvd.nist.gov/vuln/detail/CVE-2026-111391