CVE-2026-5760: Code Injection
SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chattemplate is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-5760?
CVE-2026-5760 is classified as a critical vulnerability due to its potential for Remote Code Execution.
How do I fix CVE-2026-5760?
To fix CVE-2026-5760, update SGLang to the latest version that addresses this security issue.
What is the impact of CVE-2026-5760?
The impact of CVE-2026-5760 allows attackers to execute arbitrary code on the server through malicious model files.
Who is affected by CVE-2026-5760?
CVE-2026-5760 affects users of SGLang who utilize the reranking endpoint without proper validation.
What component of SGLang is vulnerable in CVE-2026-5760?
The vulnerable component in CVE-2026-5760 is the reranking endpoint (/v1/rerank) which improperly handles the loading of unsafe chat templates.