HIGHCVSS v3.1 8.1Vulnerability

CVE-2026-111391

SGLang 0.5.10 through 0.5.22 contains a code injection vulnerability in _evaluate_filter() that allows remote attackers to execute Python code by escaping the eval() sandbox through re.search __globals__. Attackers can send a crafted filter expression to the unauthenticated /dumper/configure endpoint when DUMPER_SERVER_PORT is set, running code in the scheduler process on the next forward pass.

Properties

Severity
HIGH
Nvd fetched at
2026-10-20T21:14:08.448323+00:00
Epss score
0.00452
Cvss severity
HIGH
Cvss score
8.1
Retrieved at
2026-10-21T01:24:48+00:00
Last source
FIRST EPSS
Score
8.1
Cvss version
3.1
Cve id
CVE-2026-111391
Cvss vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-10-18T13:39:03+00:00
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published at
2026-10-16T12:16:33.197
Last modified
2026-10-16T14:17:23.290
Epss percentile
0.37932

Related Entities (1)

HAS_WEAKNESS (1)

→[Weakness]Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')

Explore deeper with Ninja Signal's threat intelligence graph

Search in SpektrOpen Signal Desktop
CVE-2026-111391 (CVSS v3.1 8.1) — Ninja Signal Threat Intelligence | Ninja Signal