CVE-2026-15974 SGLang CVE debrief

Who should care

Users of SGLang, especially those exposing the multimodal generation endpoint /v1/chat/completions to untrusted networks or users, should verify their installation and implement defensive measures to prevent exploitation. This includes reviewing access controls, monitoring for suspicious activity, and updating SGLang to the latest version if available. Security teams should prioritize this vulnerability given its potential impact on internal metadata, secrets, and services. Vulnerability management and security teams should coordinate on compensating controls and asset inventory reviews.

Technical summary

The SGLang project contains a Server-Side Request Forgery (SSRF) and local file read vulnerability in the multimodal generation endpoint /v1/chat/completions. This is due to unsanitized user input in the image_url parameter, allowing attackers to access internal metadata, secrets, and services. The vulnerability has a CVSS score of 6.5 and is considered Medium severity. To mitigate this vulnerability, users should review access controls, monitor for suspicious activity, and update SGLang to the latest version if available.

Defensive priority

Medium priority given the CVSS score of 6.5 and the potential for SSRF and local file read vulnerabilities.

Recommended defensive actions

• Verify SGLang installation for unsanitized image_url usage in /v1/chat/completions endpoint
• Restrict access to internal metadata, secrets, and services
• Implement compensating controls for SSRF and local file read vulnerabilities
• Monitor for suspicious activity in multimodal generation endpoint
• Update SGLang to latest version if available

Evidence notes

Evidence is limited; primary official records indicate a SSRF and local file read vulnerability in SGLang's multimodal generation endpoint /v1/chat/completions due to unsanitized image_url. Further verification is needed to determine affected scope and vendor remediation. Defenders should verify SGLang installation, review compensating controls, and monitor for suspicious activity.

Official resources