CVE-2025-10164 | lmsys sglang 0.4.6 update_weights_from_tensor main serialized_named_tensors deserialization

A vulnerability described as critical has been identified in lmsys sglang 0.4.6. Affected by this vulnerability is the function main of the file /update_weights_from_tensor. The manipulation of the argument serialized_named_tensors results in deserialization.

This vulnerability is reported as CVE-2025-10164. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.