critical9.8
CVE-2026-7301
SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages,…
Impact
SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| pip | sglang | >= 0.5.5, <= 0.5.12 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lmsys | Sglang | Version 0.5.10 |