SGLang (weight exfiltration): Two endpoints allow a remote attacker to pull model weights when no API key is set

Impact

Two endpoints allow a remote attacker to pull model weights when no API key is set

Who can reach it

Unauthenticated network to the serving port

What to do

Upgrade; for a neocloud hosting customer models, this is direct tenant-IP exfiltration

References

Related entries

• NVIDIA Triton Inference Server: unauthenticated request triggers excessive iteration and hangs the serverCVE-2026-16497 · NVIDIA Triton Inference Server for LinuxHigh
• Keras (HDF5 external links): Arbitrary local file read during model loadCVE-2026-1669 · Keras (HDF5 external links)High
• OpenShift AI Data Science Pipelines Operator: predictable PRNG generates MariaDB and MinIO credentialsCVE-2026-18611 · Red Hat OpenShift AI Data Science Pipelines Operator (generated MariaDB and MinIO credentials)High
• MLflow: unauthenticated arbitrary file read via prompt-tagged model version source pathCVE-2026-2614 · MLflow tracking server (`_create_model_version` / model version artifact handler)High
• Ray Dashboard: Path traversal in the dashboard static-file handler (port 8265)CVE-2026-32981 · Ray DashboardHigh
• LangChain: prompt config files are loaded from unvalidated paths, letting a caller read arbitrary host filesCVE-2026-34070 · LangChain langchain-core prompt loading (load_prompt / load_prompt_from_config)High