CVE-2026-3989 Details
Description
SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
A vulnerability exists in the SGLang framework's `replay_request_dump.py` script, which improperly uses `pickle.load()` to deserialize data without validation. This flaw allows an attacker to craft a malicious `.pkl` file that, when loaded by the script, executes arbitrary code on the host machine. The issue arises from the inherent risks of Python's pickle module, which can be exploited to run unauthorized commands by manipulating the deserialization process.
Users are advised not to run `replay_request_dump.py` on `.pkl` files from untrusted sources or shared directories with weak permissions.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 16, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/sgl-project/sglang/blob/main/scripts/playground/replay_request_dump.py | [email protected] | Product |
| https://github.com/sgl-project/sglang/pull/20904 | [email protected] | Issue TrackingPatch |
| https://github.com/sgl-project/sglang/releases/tag/v0.5.10 | [email protected] | Release Notes |
| https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/ | [email protected] | ExploitThird Party Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| lmsys sglang | < 0.5.10 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 10, 2026 | Initial Analysis | [email protected] |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 7, 2026 | CVE Modified | [email protected] |
| Mar 16, 2026 | CVE Modified | CISA-ADP |
| Mar 12, 2026 | New CVE Received | [email protected] |