CVE-2026-15974 — CVE-2026-15974
SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secret…
Published: 2026-07-30 · CVSS: 6.5 · CVSS 3.1
SGLang contains an SSRF and local file read in the multimodal generation endpoint /v1/chat/completions due to unsanitized image_url, allowing access to internal metadata, secrets, and services.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7