Advisoriesby IbisSGLangGHSA-jx93-g359-86wm
SGLang: remote code execution
Fix: upgrade to 0.5.10 or later
SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| sglang PyPI | < 0.5.10 | 0.5.10 |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity from
- GitHub (reviewed advisory)
- Weakness
- CWE-502
- Also known as
- CVE-2026-3060, PYSEC-2026-537
- nvd.nist.gov/vuln/detail/CVE-2026-3060
- github.com/sgl-project/sglang/pull/20904
- github.com/sgl-project/sglang
- github.com/sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py
- github.com/sgl-project/sglang/releases/tag/v0.5.10
- orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities
More SGLang advisories
All SGLang
SGLang's multimodal generation runtime has an unauthenticated path traversal vulnerabilityCVE-2026-7302no fix yetSGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socketCVE-2026-7301no fix yetSGLang: Unauthenticated RCE via --enable-custom-logit-processorCVE-2026-7304no fix yetSGLang has an Improper Input Validation/Injection IssueCVE-2026-7669no fix yetSGLang: unsafe deserializationCVE-2026-3989fixed in 0.5.10SGLang: remote code executionCVE-2026-3059fixed in 0.5.10