critical9.8
CVE-2026-3060
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module
Impact
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sglang | <= 0.5.9 | 0.5.10 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | from 0.5.5 through 0.5.9 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py
- https://github.com/sgl-project/sglang/pull/20904
- https://github.com/sgl-project/sglang/releases/tag/v0.5.10
- https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/
- https://github.com/advisories/GHSA-jx93-g359-86wm
- https://nvd.nist.gov/vuln/detail/CVE-2026-3060
- https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities