CVE-2026-5760 | THREATINT

Description

SGLang’s reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().

PUBLISHED Reserved 2026-04-07 | Published 2026-04-20 | Updated 2026-04-20 | Assigner certcc

Problem types

CWE-94: Improper Control of Generation of Code (‘Code Injection’)

Product status

0.59
affected

References

github.com/Stuub/SGLang-0.5.9-RCE

cve.org (CVE-2026-5760)

nvd.nist.gov (CVE-2026-5760)

Download JSON