{"id":"CVE-2026-111391","summary":"SGLang 0.5.10 through 0.5.22 Code Injection via Debug Dumper Filter","details":"SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.","modified":"2026-10-24T02:48:41.264749244Z","published":"2026-10-16T11:41:52.009Z","database_specific":{"cna_assigner":"VulnCheck","cwe_ids":["CWE-95"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111391.json"},"references":[{"type":"WEB","url":"https://pypi.org"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/111xxx/CVE-2026-111391.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111391"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/sglang-0.5.10-through-0.5.22-code-injection-via-debug-dumper-filter"},{"type":"REPORT","url":"https://github.com/sgl-project/sglang/issues/44188"},{"type":"PACKAGE","url":"https://github.com/sgl-project/sglang"},{"type":"ARTICLE","url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1309-L1320"},{"type":"ARTICLE","url":"https://github.com/sgl-project/sglang/blob/v0.5.22/python/sglang/srt/debug_utils/dumper.py#L1380-L1401"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/sgl-project/sglang","events":[{"introduced":"1519acf37c23f2189adb93f57ca9cd2db1bebf18"},{"last_affected":"baa9befa381511cd4d56f83980951e5a45fffc6d"}],"database_specific":{"extracted_events":[{"range":[{"introduced":"0.5.10"},{"last_affected":"0.5.22"}],"source":"AFFECTED_FIELD","strategy":"StandardRange"},{"source":"DESCRIPTION","range":[{"introduced":"0.5.10"},{"last_affected":"0.5.22"}]}]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-111391.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N"}]}