SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files

A critical RCE vulnerability (CVE-2026-5760, CVSS 9.8) was disclosed in the SGLang LLM serving framework: a malicious GGUF model file can embed a Jinja2 SSTI payload in tokenizer.chat_template which, when the model is loaded and the /v1/rerank endpoint is invoked, is rendered with an unsandboxed jinja2.Environment() and executes arbitrary Python on the server. CERT/CC and the finder recommend switching to ImmutableSandboxedEnvironment to prevent exploitation; no vendor patch or response was reported in the advisory.