CVE-2026-93034

critical · 9.8

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.

9.8

CVSS

0.5%

EPSS (exploit prob.)

40th

EPSS percentile

2026-10-08

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

References

https://github.com/sgl-project/sglang/tree/main
https://m00dy.sh/notes/disabling-pickle-did-not-remove-pickle?palette=mineral

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-93034