CyberRota Analysis
AI-GeneratedThe vulnerability in SGLang allows for remote code execution (RCE) when the optional dumper subsystem is enabled and the DUMPER_SERVER_PORT is configured, leading to a potential sandbox escape. This critical flaw poses significant risks for any environment utilizing SGLang with the dumper feature active, making it imperative for organizations using this software to prioritize immediate remediation efforts. Security teams should assess their configurations and apply necessary patches to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.
Related CVEs
Other vulnerabilities affecting the same vendor(s)