CVE-2026-10300 json
SGLang Inference HTTP Endpoint lora_manager.py assertion
published 5mo ago modified 3mo ago also GHSA-m2jr-x4gq-5rmj , PYSEC-2026-3064 , EUVD-2026-33833
- cvss
- 3.7
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.4%
- EPSS 0.4% chance of exploitation in 30 days, percentile 30%
- public exploits
- 0
- none known
Summary
A security vulnerability has been detected in SGLang 0.5.10.post1. Impacted is an unknown function of the file python/sglang/srt/lora/lora_manager.py of the component Inference HTTP Endpoint. Such manipulation of the argument lora_path leads to reachable assertion. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been disclosed publicly and may be used. The pull request to fix this issue awaits acceptance.
Patch / fix
- github.com/sgl-project/sglang#25078 pull request
Is CVE-2026-10300 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.
Check with FencerCISA SSVC
- Exploitation
- Proof of concept is public
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5mo ago
Exploit prediction
0.37% chance of exploitation in the next 30 days, higher than 30% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- github.com https://github.com/sgl-project/sglang/issues/23141 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.3 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
| CNA | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 3.0 | 3.7 | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R |
| CNA | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:N/A:P/E:POC/RL:ND/RC:UR |
| CNA | 4.0 | 2.9 | CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| CNA | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
| CNA | 2.0 | 2.6 | AV:N/AC:H/Au:N/C:N/I:N/A:P |
| GitHub | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
| OSV | 3.1 | 3.7 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| pypi | sglang | <=0.5.10.post1 |
no fix listed |
Affected products
- n/a SGLang
Classification
- Weakness
-
- CWE-617 Reachable Assertion
References
-
github.com
/sgl-project/sglang/pull/25078
issue-tracking, patch, web
-
github.com
/sgl-project/sglang/issues/23141
exploit, issue-tracking, web
-
vuldb.com
/vuln/367593
vdb-entry, technical-description, web
-
vuldb.com
/vuln/367593/cti
signature, permissions-required, web
-
vuldb.com
/cve/CVE-2026-10300
third-party-advisory, web
-
vuldb.com
/submit/828086
third-party-advisory, web
-
nvd.nist.gov
/vuln/detail/CVE-2026-10300
advisory
-
github.com
/sgl-project/sglang
web
-
pypi.org
/project/sglang
package
-
github.com
/advisories/GHSA-m2jr-x4gq-5rmj
advisory
Sources
- CVE List CVE-2026-10300
- GitHub Advisory GHSA-m2jr-x4gq-5rmj
- NVD CVE-2026-10300
- OSV PYSEC-2026-3064
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.