SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

Back Thehackernews

SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

Thehackernews • April 20, 2026

Share: View original

Rethink AppSec for AI driven attacks. Learn how to close patch gaps and prioritize vulnerabilities against automated exploitation at scale.

Learn how to validate real attack paths and reduce exploitable risk with continuous agentic security validation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models A remote code execution vulnerability has been identified in the SGLang framework, specifically affecting the reranking endpoint (/v1/rerank) and tracked as CVE-2026-5760. This flaw allows attackers to exploit maliciously crafted GGUF model files containing Jinja2 templates, leading to the execution of arbitrary Python code on the server. The vulnerability arises from the unsandboxed use of jinja2.Environment() in the rendering process of chat templates. Successful exploitation could result in host compromise, lateral movement, data exfiltration, or denial-of-service attacks. The issue affects deployments of SGLang that expose the vulnerable interface to untrusted networks. Despite attempts to coordinate with project maintainers, no response or patch has been issued. The severity of this vulnerability is underscored by its potential impact on enterprise AI deployments. Security researchers recommend using ImmutableSandboxedEnvironment to mitigate the risk of exploitation. 7 sources 70

Extracted Entities

Attack Types (1)

Zero-day Exploit

CVEs (1)

MITRE ATT&CK (1)

T1203 - Exploitation for Client Execution