CRITICAL 9.1

PYSEC-2026-538

SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

Details

SGLang's multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / sglang

Introduced in: 0.5.5

No fixed version published yet for sglang (pip). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-7302 [ADVISORY]
https://antiproof.ai/blog/three-rces-in-sglang [WEB]
https://github.com/sgl-project/sglang [PACKAGE]
https://github.com/sgl-project/sglang/tree/main/python/sglang [WEB]
https://pypi.org/project/sglang [PACKAGE]
https://github.com/advisories/GHSA-qwrp-wghp-94q2 [ADVISORY]