critical9.8
CVE-2026-7304
SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Pyt…
Impact
SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sglang | >= 0.4.1.post7, <= 0.5.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | Version 0.5.10 |