Critical severity · published Mar 12, 2026
CVE-2026-3060
No description published yet
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SG
SGLang · SGLang
0.5.10 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-3060
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-3060
Product
https://github.com/sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py
github.com
https://github.com/sgl-project/sglang/pull/20904
github.com
https://github.com/sgl-project/sglang/releases/tag/v0.5.10
Exploit
https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/
More from SGLang
9.8
CVE-2026-93034
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in…
9.8
CVE-2026-93088
No description published yet
9.8
CVE-2026-86793
No description published yet
9.8
CVE-2026-15969
No description published yet
9.8
CVE-2026-15976
No description published yet