CyberRota Analysis
AI-GeneratedSGLang is vulnerable to unauthenticated pickle deserialization through the /update_weights_from_tensor endpoint when authentication keys are not configured, allowing attackers to bypass the SafeUnpickler policy. This flaw enables remote code execution via the pickle REDUCE function, posing a significant risk to systems using this library. Organizations utilizing SGLang should prioritize addressing this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE.