PyPI/sglang CVE-2026-7669: medium 5.6, EPSS 0.37%
SGLang has an Improper Input Validation/Injection Issue
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.5.9 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3062
- https://nvd.nist.gov/vuln/detail/CVE-2026-7669
- https://github.com/gouldnicholas/CVE-2026-7669-PoC
- https://github.com/sgl-project/sglang
- https://vuldb.com/submit/799263
- https://vuldb.com/vuln/360817
- https://vuldb.com/vuln/360817/cti
- https://pypi.org/project/sglang
- https://github.com/advisories/GHSA-6m5f-673f-5vh7
CVE-2026-7669 · published · modified · JSON