CVE-2026-5760

CVE-2026-5760

SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

Affected

SGLang

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.14% chance of exploitation in the next 30 days, 66th percentile

Published

2026-04-20

Updated

2026-04-29

Proof-of-concept exploits (1)

• Stuub/SGLang-0.5.9-RCE5★ · 2026-04-20

Security advisories

• https://www.kb.cert.org/vuls/id/915947
• sgl-project/sglang/pull/23660

References

• CVE Record
• NVD entry

Related

• CVE-2024-27198
• CVE-2024-27199
• CVE-2024-28955
• CVE-2024-28995
• CVE-2024-29895
• CVE-2024-31848