CVE-2026-10300 json
SGLang Inference HTTP Endpoint lora_manager.py assertion
published 2026-06-01 5 mo ago modified 2026-07-22 3 mo ago also GHSA-m2jr-x4gq-5rmj , PYSEC-2026-3064 , EUVD-2026-33833
- cvss
- 3.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 30%
- public exploits
- 0
- none known
Summary
A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Patch / fix
- github.com/sgl-project/sglang#25078 pull request
CISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.37% chance of exploitation in the next 30 days, higher than 30% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- github.com https://github.com/sgl-project/sglang/issues/23141 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 3.7 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 2.9 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
| CNA | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:N/A:P |
| GitHub | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
| OSV | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | sglang | <=0.5.10.post1 |
no fix listed |
Affected products
- n/a SGLang
Classification
- Weakness
-
- CWE-617 Reachable Assertion
References
-
github.com
/sgl-project/sglang/pull/25078
issue-tracking, patch, web
-
github.com
/sgl-project/sglang/issues/23141
exploit, issue-tracking, web
-
vuldb.com
/vuln/367593
vdb-entry, technical-description, web
-
vuldb.com
/vuln/367593/cti
signature, permissions-required, web
-
vuldb.com
/cve/CVE-2026-10300
third-party-advisory, web
-
vuldb.com
/submit/828086
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-10300
advisory
-
github.com
/sgl-project/sglang
web
-
pypi.org
/project/sglang
package
-
github.com
/advisories/GHSA-m2jr-x4gq-5rmj
advisory
Sources
- CVE List CVE-2026-10300
- GitHub Advisory GHSA-m2jr-x4gq-5rmj
- NVD CVE-2026-10300
- OSV PYSEC-2026-3064
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.