CVE-2026-15977: SGLang contains a credential leakage vulnerability in the
SGLang contains a credential leakage vulnerability in the /server_info endpoint, which will return API keys and SSL keyfile information when only the --admin-api-key is configured.
- EPSS 0.4% (33.9% percentile)
- CVSS 7.5 high