Detections
Analytics

SCA: security update for sglang (GHSA-6m5f-673f-5vh7)

medium Tenable Self-Hosted Container Security Plugin ID 446664

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function get_tokenizer of
 the file python/sglang/srt/utils/hf_transformers_utils.py of the component HuggingFace Transformer
 Handler. The manipulation of the argument trust_remote_code with the input False as part of Boolean
 results in code injection. The attack can be executed remotely. A high complexity level is associated with
 this attack. The exploitability is considered difficult. In get_tokenizer(), when the caller passes
 trust_remote_code=False and HuggingFace transformers v5 returns a TokenizersBackend instance (the generic
 fallback for tokenizer classes not in the registry), SGLang silently re-invokes
 AutoTokenizer.from_pretrained with trust_remote_code=True, overriding the caller's explicit security
 setting. A model repository containing a malicious tokenizer.py referenced via auto_map in
 tokenizer_config.json will execute arbitrary Python in the SGLang process during this second call. No log
 line or warning is emitted. The override affects all current SGLang versions because transformers==5.3.0
 is pinned in pyproject.toml. Both tokenizer_mode="auto" and tokenizer_mode="slow" are affected. The
 exploit is now public and may be used. The vendor was contacted early about this disclosure but did not
 respond in any way. (CVE-2026-7669)

Solution

There is no known solution at this time.

See Also

https://github.com/advisories/GHSA-6m5f-673f-5vh7

Plugin Details

Severity: Medium

ID: 446664

Version: Revision 1.1

Type: Local

Family: SCA Checks

Published: 8/31/2026

Updated: 8/31/2026

Risk Information

VPR

Risk Factor: Low

Score: 2.8

Percentile: 22.59

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.1

Temporal Score: 3.8

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-2026-7669

CVSS v3

Risk Factor: Medium

Base Score: 5.6

Temporal Score: 4.9

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 6.3

Threat Score: 1.7

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 5/3/2026

Vulnerability Publication Date: 5/2/2026

Reference Information

CVE: CVE-2026-7669