CVE-2026-5760 - Vulnerability Details

Related Threat Clusters

• Critical RCE Vulnerability Discovered in SGLang Framework via GGUF Models

  A remote code execution vulnerability has been identified in the SGLang framework, specifically affecting the reranking endpoint (/v1/rerank) and tracked as CVE-2026-5760. This flaw allows attackers to exploit…

  7 articles · Updated April 21, 2026

Recent Intelligence Reports

• Hackers Could Weaponize GGUF Models to Achieve RCE on SGLang Inference Servers — Cybersecuritynews · April 21, 2026
• Malicious GGUF Models Could Trigger Remote Code Execution on SGLang Servers — Gbhackers · April 21, 2026
• SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files — Thehackernews · April 20, 2026
• VU#915947: SGLang is vulnerable to remote code execution when rendering chat templates from a model file — Kb.Cert · April 20, 2026

Related Entities