CVE-2026-3060 Details
Description
SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
A vulnerability in the disaggregation encoder receiver of the SGLang framework allows for unauthenticated remote code execution. This issue arises because the disaggregation module deserializes untrusted data using Python's pickle module, without any authentication or validation. The vulnerability is present in all versions of SGLang that include the disaggregation module.
As an immediate step, ensure that the ZMQ broker port is not exposed to untrusted networks. If the disaggregation features are not needed, disable them. For a long-term solution, SGLang's codebase should be audited to replace all instances of unsafe pickle deserialization with safe alternatives.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| lmsys sglang | >= 0.5.5, <= 0.5.9 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 7, 2026 | CVE Modified | [email protected] |
| Mar 17, 2026 | Initial Analysis | [email protected] |
| Mar 12, 2026 | CVE Modified | CISA-ADP |
| Mar 12, 2026 | New CVE Received | [email protected] |