CVE-2026-15976 SGLang CVE debrief

Who should care

Organizations using SGLang, developers working with model weights, security teams responsible for monitoring and patching vulnerabilities, and operators managing affected systems should be aware of this critical vulnerability. Immediate attention is required to assess exposure and apply mitigations. Vulnerability management teams should prioritize patching and verify model weight loading procedures. Security teams should monitor for suspicious model weight loading activities and implement strict controls on pickle deserialization of .bin files.

Technical summary

CVE-2026-15976 is a critical remote code execution vulnerability in SGLang, specifically within the /update_weights_from_disk function where torch.load(..., weights_only=False) enables pickle deserialization of .bin files. This vulnerability has a CVSS score of 9.8 and is considered CRITICAL. The vulnerability allows for arbitrary code execution when loading model weights from a HuggingFace repository. Affected product deployments require immediate attention to assess exposure and apply mitigations. Security teams should monitor for suspicious model weight loading activities and implement strict controls on pickle deserialization of .bin files.

Defensive priority

Critical vulnerability in SGLang with potential for remote code execution; immediate attention required

Recommended defensive actions

• Inventory SGLang installations and verify model weight loading procedures
• Restrict access to /update_weights_from_disk functionality
• Implement strict controls on pickle deserialization of .bin files
• Monitor for suspicious model weight loading activities
• Apply vendor patches or mitigations as available

Evidence notes

Evidence primarily from NVD and CVE.org; limited vendor or product information available; vulnerability details sourced from public advisories. Additional review of HuggingFace repository and SGLang documentation did not provide further details. Defensive verification tasks include reviewing model weight loading procedures and monitoring for suspicious activities.

Official resources