GHSA-rgq9-fqf5-fv58

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

Source: GitHub Advisory Database (reviewed) Critical CVE-2026-3059

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	sglang	< 0.5.10	0.5.10

Details

As written in the advisory (Markdown source, shown as plain text).

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.

References

External links from the advisory. They lead to third-party sites.

https://github.com/sgl-project/sglang/security/advisories/GHSA-3cp7-c6q2-94xr web
https://nvd.nist.gov/vuln/detail/CVE-2026-3059 advisory
https://github.com/sgl-project/sglang/pull/20904 web
https://github.com/sgl-project/sglang package
https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/scheduler_client.py web
https://github.com/sgl-project/sglang/releases/tag/v0.5.10 web
https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities web