SGLang code injection vulnerability CVE-2026-111391 has no fixed version; the only fix PR was closed without merging

SGLang's debug dumper filter has a code injection vulnerability; CVE-2026-111391 records that versions 0.5.10 through 0.5.22 are affected with no fixed version, and the only patch PR removing eval() was closed without merging. The record was published by VulnCheck as a CNA on 16 October, with the same vulnerability rated 9.2 under CVSS v4.0 and 8.1 under v3.1. An attacker sends a crafted filter expression to the unauthenticated /dumper/configure endpoint, escaping the eval() sandbox via re.search's __globals__, executing Python code in the scheduler process; when DUMPER_SERVER_PORT is set to reuse, this route shares the same port as the inference service, and the permission flag is ADMIN_OPTIONAL.