CVE-2026-3059: SGLang Remote Code Execution Vulnerability via ZMQ Broker
Summary
CVE-2026-3059: SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication. Affects sglang versions < 0.5.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SGLang is a multimodal generation module designed for various applications, enabling users to generate content across different formats. It leverages the ZeroMQ (ZMQ) messaging library for communication. However, a critical vulnerability has been identified in its handling of untrusted data, exposing it to potential remote code execution attacks.
Vulnerability Detail
The vulnerability in SGLang arises from its use of the pickle.loads() function to deserialize untrusted data received through the ZMQ broker. This lack of authentication allows an attacker to send malicious payloads that can be executed on the server, leading to unauthorized access and control over the system. The severity of this vulnerability is underscored by its CVSS score of 9.8, indicating a critical risk to affected systems.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can disable the ZMQ broker or implement strict input validation to prevent untrusted data from being processed. However, this is not a permanent solution and should be followed by applying the patch as soon as possible.
Conclusion
The CVE-2026-3059 vulnerability in SGLang poses a significant risk due to its potential for remote code execution. Users are strongly advised to update to the latest version to mitigate this risk. Utilizing tools like Vulert can further enhance your security posture by providing ongoing monitoring for vulnerabilities.
See every vulnerability recorded for sglang →
FAQ
The vulnerability allows unauthenticated remote code execution through the deserialization of untrusted data.
You can use the Vulert playground to check if your application is affected by this vulnerability without any signup required.
An attacker could gain unauthorized access to the system, execute arbitrary code, and potentially compromise sensitive data.
Yes, updating to version 0.6.0 or later of the SGLang package addresses the vulnerability.
Vulert monitors and alerts for open-source vulnerabilities in your software using just the Pipfile.lock, providing real-time insights.
Related vulnerabilities
Recent vulnerabilities recorded for sglang.
