GHSA-jx93-g359-86wm

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-3060

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	sglang	< 0.5.10	0.5.10

Details

As written in the advisory (Markdown source, shown as plain text).

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2026-3060 advisory
https://github.com/sgl-project/sglang/pull/20904 web
https://github.com/sgl-project/sglang package
https://github.com/sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py web
https://github.com/sgl-project/sglang/releases/tag/v0.5.10 web
https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities web