CVE-2026-15976: Critical severity SGLang vulnerability
SGLang contains a RCE vulnerability when attempting to load model weights from a HuggingFace repository, specifically within the /updateweightsfromdisk, where torch.load(..., weightsonly=False) fallback enables pickle deserialization of .bin files.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-15976?
CVE-2026-15976 has a risk score of 82, indicating a high severity vulnerability.
What systems are affected by CVE-2026-15976?
CVE-2026-15976 affects the SGLang software when loading model weights from HuggingFace repositories.
How do I fix CVE-2026-15976?
To fix CVE-2026-15976, avoid using the /update_weights_from_disk functionality that relies on torch.load with weights_only set to False.
What type of vulnerability is CVE-2026-15976?
CVE-2026-15976 is a remote code execution (RCE) vulnerability caused by insecure pickle deserialization.
What should I do if I am using a vulnerable version of SGLang with CVE-2026-15976?
If using a vulnerable version of SGLang, it is recommended to update to a patched version as soon as it is available.