CVE-2026-7302
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the serv…
Published May 18, 2026 · updated Oct 14, 2026 · lmsys sglang
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.
Timeline
Detection, updates, and resolution for this record.
May 18, 2026 · NIST NVD
Detected
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.
Oct 14, 2026 · NIST NVD
Updated
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.
Affected
- cpe lmsys/sglang0.5.10
Sources
- CVE.orgCVE-2026-7302
Official CVE identifier
cve.org - FIRST EPSSCVE-2026-7302
30-day exploitation probability 0.6%
first.org - NIST NVDCVE-2026-7302
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.
nvd.nist.gov