9.8 Critical
CVE-2026-5760
CVE-2026-5760
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
0.8%probability of exploitation in the next 30 days
Higher than 58% of scored CVEs
SeverityCVSS
9.8Critical
Description NVD
SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2 chat templates are rendered using an unsandboxed jinja2.Environment().
Coverage 1 article · 1 outlet
- Critical CVE-2026-5760 Bug in SGLang Enables Code ExecutionThe Hacker News · first in our coverage