CVE-2026-15974: Lmsys Sglang

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.

Affected products

• Lmsys Sglang: up to and including 0.5.15

Published 2026-07-30. Last modified 2026-08-04.