high7.5
CVE-2026-15977
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-a…
Impact
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | through 0.5.15 |