#CVE-2026-111391

SGLang debug feature lets attackers run code on AI inference servers — no fix yet, keep it switched off

CVE-2026-111391 affects SGLang 0.5.10–0.5.22 when the optional "dumper" debug server is enabled. It is off by default; there is no patch yet.