A deserialization flaw in the get_tokenizer function of the HuggingFace Transformer Handler module in sgl-project SGLang allows an attacker to supply crafted data that will be unserialized, potentially enabling the execution of arbitrary code on the target system. The vulnerability requires the attacker to invoke the affected function remotely, and the attack is considered complex and difficult to execute, but if successful it would give the attacker control over the affected environment and compromise confidentiality, integrity, and availability.

The affected product is sgl-project SGLang, with versions up to and including 0.5.9 vulnerable to this flaw. No further version or patch information is provided in the CVE data.

The CVSS score of 6.3 indicates a moderately high severity, and EPSS data is not available, so the exact likelihood of exploitation remains unknown. The vulnerability is not listed in CISA’s KEV catalog. The attack vector is remote, requiring an attacker to send malicious payloads to the get_tokenizer function. The high complexity and difficulty of exploitation suggest that an attacker would need significant expertise and resources to successfully weaponize this flaw.