A vulnerability categorized as critical has been discovered in SGLang 5.10. The impacted element is an unknown function. The manipulation results in path traversal: ‘…/…//’.

This vulnerability is known as CVE-2026-7302. It is possible to launch the attack remotely. No exploit is available.