CVE-2026-3059 Details
Description
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
A remote code execution vulnerability has been identified in SGLang's multimodal generation module, specifically within the ZMQ broker component. This vulnerability arises from the broker's deserialization of untrusted data using Python's pickle module, without any authentication or validation. The issue allows for unauthenticated remote code execution on the server where SGLang is running.
SGLang users can manually apply a patch that binds the ZMQ broker to localhost by default and replaces pickle serialization with msgpack, while allowing pickle as a fallback. This vulnerability can also be mitigated by ensuring that ZMQ broker ports are not exposed to untrusted networks and by reviewing deployment flags to avoid using the multimodal generation feature.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| lmsys sglang | >= 0.5.5, <= 0.5.9 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 7, 2026 | CVE Modified | [email protected] |
| Mar 17, 2026 | Initial Analysis | [email protected] |
| Mar 12, 2026 | CVE Modified | CISA-ADP |
| Mar 12, 2026 | New CVE Received | [email protected] |