chenchenghao/sglang
1
0
Fork 0
Code Issues Pull Requests Actions 12 Packages Projects Releases Wiki Activity

Fix(security): block unsafe pickle deserialization to mitigate CVE-2025-10164 (#11909)

Browse Source 
Co-authored-by: Chengxing Xie <xiechengxing34@gmail.com>
Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>
This commit is contained in:
thelongestusernameofall
2025-10-24 10:12:40 +08:00
committed by GitHub
parent f80371ff8c
commit 49afb3d9d9
3 changed files with 81 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/security/acknowledgements.md Normal file
View File

@@ -0,0 +1,3 @@
| Time | CVE ID | Credit to | Affected Versions | Severity | Impact | Description |
|------------|--------------|------------------|---------------------------|------------|----------------------|-------------|
| 2025-09-09 | CVE-2025-10164 | Simon Huang, pjf | ≥ 0.4.6 & ≤ 0.5.3 | Critical | Remote Code Execution | A security flaw exists in lmsys sglang versions ≥ 0.4.6 and ≤ 0.5.3. The vulnerability arises from the use of unsafe pickle deserialization of the `serialized_named_tensors` parameter in the `/update_weights_from_tensor` API endpoint, which could allow a remote attacker to execute arbitrary code on the server by sending a specially crafted payload. |