Critical severity · published Mar 12, 2026
CVE-2026-3059
No description published yet
9.8
CVSS
1.6%
EPSS
No
On KEV
Description
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
SGLang · SGLang
0.5.10 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-3059
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-3059
Product
https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/scheduler_client.py
github.com
https://github.com/sgl-project/sglang/pull/20904
github.com
https://github.com/sgl-project/sglang/releases/tag/v0.5.10
Broken Link
https://github.com/sgl-project/sglang/security/advisories/GHSA-3cp7-c6q2-94xr
Exploit
https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/
More from SGLang
9.8
CVE-2026-93034
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in…
9.8
CVE-2026-93088
No description published yet
9.8
CVE-2026-86793
No description published yet
9.8
CVE-2026-15969
No description published yet
9.8
CVE-2026-15976
No description published yet