# SGLang puts weight updates and LoRA loading behind a dedicated admin key

> Source: <https://runtimewire.com/article/sglang-admin-key-weight-updates-lora>
> Published: 2026-11-15 02:08:01+00:00

# SGLang puts weight updates and LoRA loading behind a dedicated admin key

**Merged on November 14th, the breaking change returns 403 without a configured admin key and leaves several operational routes at a weaker optional level.**

        By [RuntimeWire Staff](https://runtimewire.com/author/runtimewire-staff)
        · Published 

SGLang merged a breaking authentication change on November 14th that puts weight updates, LoRA loading and a long list of runtime controls behind a dedicated administrator key. The change was submitted by contributor Shuwen Wang, who uses the GitHub account alphabetc1, as pull request #49896 and landed in commit 7b5fb39.

Routes classified as 'ADMIN_FORCE' return HTTP 403 when the server starts without an admin key. When a key is configured, they accept that admin key rather than an ordinary inference API key.…
