GitHub Advisoryadvisory · PyPI

GHSA-9w53-xr52-mwgj SGLang Remote Code Execution Vulnerability via Unsafe Deserialization in update_weights_from_tensor

MEDIUM Published 2025-09-09 Modified 2025-10-29 Official page ↗
Aliases
CVE-2025-10164
Ecosystem
PyPI
Packages
sglang
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-20, CWE-502
Reviewed
2025-10-29

Affected packages

• PyPI sglang: < 0.5.4 → fixed in 0.5.4

Description

A security flaw has been discovered in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /update_weights_from_tensor. The manipulation of the argument serialized_named_tensors results in deserialization. The attack can be launched remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way.

Related

Alias · CVE (1)

  • CVE-2025-10164 A security flaw has been discovered in lmsys sglang 0.4.6. vulnerability

Weakness · CWE (2)

  • CWE-20 Improper Input Validation weakness
  • CWE-502 Deserialization of Untrusted Data weakness

References