SGLang implements an optional dumper subsystem that, when enabled, can execute arbitrary code during inference requests. The flaw originates from improper handling of the DUMPER_SERVER_PORT configuration, allowing a sandbox escape that satisfies CWE‑95 (Improper Restriction of Operations within a Multilevel Security Context). An attacker who can trigger inference requests against the affected endpoint could gain full control of the underlying host, compromising data confidentiality, integrity, and availability.

The product in question is SGLang. No specific version ranges were enumerated in the advisory, so any installation that has the optional dumper subsystem enabled and a non‑zero DUMPER_SERVER_PORT remains at risk. Administrators should verify whether the dumper feature is active in their deployment and review the DUMPER_SERVER_PORT setting.

The vulnerability carries a high CVSS score of 9.8 and an EPSS score of less than 1% at the time of analysis, indicating a severe risk but a very low probability of exploitation in the wild. It is not listed in the CISA KEV catalog. The likely attack vector is a network‑based adversary who can send inference requests to the public or internal endpoint that forwards to the dumper service. Exploitation would require that DUMPER_SERVER_PORT be configured with a value that allows the dumper to load and execute payloads. Due to the critical impact and ease of exploitation once the conditions are met, the vulnerability is considered a top‑priority concern.