critical9.1
CVE-2026-7302
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere …
Impact
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sglang | >= 0.5.5, <= 0.5.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | Version 0.5.10 |