← Back to CVE List
CVE-2026-3059NVD
Vulnerability Summary
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
External References
- https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/scheduler_client.py
- https://github.com/sgl-project/sglang/pull/20904
- https://github.com/sgl-project/sglang/releases/tag/v0.5.10
- https://github.com/sgl-project/sglang/security/advisories/GHSA-3cp7-c6q2-94xr
- https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/