Sglang by Lmsys
SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file that results in unauthenticated remote code execution when the feature is enabled and the service is reachable over the network.
CVSS Score
9.1
CRITICAL
Published
16 Jul 2026 16:19
Modified
10 Aug 2026 14:13
Vendor
Lmsys
Product
Sglang
Source
CIRCL
CVSS v3 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Complexity
Low
Privileges
None
Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Weaknesses (CWE)
CWE-502
Affected Systems
Lmsys
Sglang
Lmsys
Sglang
External Links
KEV Status
Not in CISA KEV catalog