Question 1

What is CVE-2026-15971 — CVE-2026-15971?

Accepted Answer

SGLang contains an RCE vulnerability when the optional dumper subsystem is enabled, allowing for a sandbox escape when DUMPER_SERVER_PORT is set, enabling code execution on inference requests.

Question 2

What is the authoritative source for CVE-2026-15971?

Accepted Answer

CVE-2026-15971 (CVE-2026-15971) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2026-15971CVE-2026-15971

Description

Scoring