9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-7302

CVE-2026-7302: SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerability

SGLang's multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload filename when sent to specific endpoints.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-7302

CVE-2026-7302:

9.1

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
sglang	pip	>= 0.5.5, <= 0.5.12

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The analysis is based on a detailed technical blog post from Antiproof, as the vulnerable code and the corresponding patch were not found in the provided repository information. The blog post describes a path traversal vulnerability (CVE-2026-7302) in SGLang's multimodal generation runtime.

The vulnerability exists in the file upload functionality for the OpenAI-compatible endpoints /v1/images/edits and /v1/videos. The root cause is the lack of sanitization of the user-provided filename in a multipart upload request.

The blog post identifies a helper function, _save_upload_to_path, that performs the file write operation. This function is inherently dangerous as it trusts the target_path argument completely. The calling code, which is the endpoint handler for the image and video editing endpoints, constructs this target_path by concatenating a base directory with the unsanitized filename from the upload. This allows an attacker to craft a filename like ../../../../tmp/pwned.txt to write a file to an arbitrary location on the server's filesystem, limited only by the process's write permissions.

Two main functions are identified as part of the vulnerability:

The endpoint handlers (inferred name openai_v1_images_edits and a similar one for videos) that receive the upload and construct the malicious path.
The _save_upload_to_path function that performs the arbitrary file write.

Both of these functions would appear in a runtime profile or stack trace during the exploitation of this vulnerability.

Vulnerable functions

_save_upload_to_path

python/sglang/srt/entrypoints/http_server.py

The function `_save_upload_to_path` is vulnerable to a path traversal attack. It writes the content of an `UploadFile` to a `target_path` that is constructed from a user-controlled filename. The function does not sanitize or validate the `target_path`, allowing an attacker to use '.._` sequences to write files outside of the intended directory.

openai_v1_images_edits

python/sglang/srt/entrypoints/http_server.py

The endpoint handler for `/v1/images/edits` (and `/v1/videos`) constructs the file path for uploads. It uses the user-provided filename directly from the multipart form data without sanitization. This allows an attacker to include path traversal sequences (`../`) in the filename, which are then passed to the file writing function `_save_upload_to_path`. The function name is inferred based on the functionality and other endpoint names in the application.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.