GHSA-36m8-w8qf-g76p

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-7304

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	sglang	>= 0.4.1.post7, <= 0.5.12	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-7304 advisory
https://antiproof.ai/blog/three-rces-in-sglang web
https://github.com/sgl-project/sglang package
https://github.com/sgl-project/sglang/tree/main/python/sglang web