CVE-2026-111391: SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter
SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in evaluatefilter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search globals. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPERSERVERPORT is set, running code in the scheduler process on the next forward pass.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to remote exploitation?
Deployments running SGLang versions 0.5.10 through 0.5.22 are exposed when DUMPER_SERVER_PORT is set, because that enables the unauthenticated /dumper/configure endpoint.
What does an attacker need to exploit this issue?
An attacker needs network access to the /dumper/configure endpoint and must submit a crafted filter expression. No authentication or user interaction is required.
When does the injected code execute, and what process runs it?
The supplied code runs on the next forward pass. It executes in the scheduler process.