critical9.8
CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker
Impact
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sglang | <= 0.5.9 | 0.5.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | from 0.5.5 through 0.5.9 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/scheduler_client.py
- https://github.com/sgl-project/sglang/pull/20904
- https://github.com/sgl-project/sglang/releases/tag/v0.5.10
- https://github.com/sgl-project/sglang/security/advisories/GHSA-3cp7-c6q2-94xr
- https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/
- https://github.com/advisories/GHSA-rgq9-fqf5-fv58
- https://nvd.nist.gov/vuln/detail/CVE-2026-3059
- https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities