sgl-project sglang (0.5.10 – 0.5.22) is affected by a CRITICAL eval injection (CVE-2026-111391, CVSS 9.2). Remote RCE is possible via /dumper/configure if DUMPER_SERVER_PORT is set. Patch ASAP! https://radar.offseq.com/threat/cve-2026-111391-improper-neutralization-of-directives-in-dynamically-evaluated-code-eval-injection-in-f8a10e538b599ada #OffSeq #CVE2026111391 #Python #Security
#cve2026111391 — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #cve2026111391, aggregated by home.social.