CVE-2026-3060: SGLang Package Vulnerable to Unauthenticated Remote Code Execution
Summary
CVE-2026-3060: SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication. Affects sglang versions < 0.5.9. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
SGLang is a programming language designed for building scalable applications with a focus on simplicity and performance. It features an encoder parallel disaggregation system that allows for efficient data processing. However, this system has a critical vulnerability that exposes it to remote code execution attacks, potentially compromising the integrity and security of applications using this package.
Vulnerability Detail
The vulnerability in SGLang arises from its encoder parallel disaggregation system, which utilizes the pickle.loads() function to deserialize untrusted data without any authentication checks. This flaw allows an attacker to send specially crafted data to the disaggregation module, leading to unauthenticated remote code execution. The ramifications of this vulnerability are severe, as it could allow attackers to execute arbitrary code on the server, leading to data breaches, service disruptions, and unauthorized access to sensitive information.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can implement input validation and sanitization before passing data to the disaggregation module. This can help mitigate the risk of remote code execution until the package is updated. However, it is strongly recommended to apply the patch as soon as possible.
Conclusion
The SGLang package has a critical vulnerability (CVE-2026-3060) that allows for unauthenticated remote code execution through its disaggregation module. It is essential to update to the patched version to mitigate this risk. Implementing workarounds can help, but updating is the most effective solution.
See every vulnerability recorded for sglang →
FAQ
CVE-2026-3060 is a vulnerability in the SGLang package that allows unauthenticated remote code execution through its encoder parallel disaggregation system.
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring any signup.
The CVSS score of this vulnerability is 9.8, indicating a critical level of severity.
If you cannot update the package immediately, implement input validation and sanitization as a temporary workaround to reduce the risk of exploitation.
You can find more information about SGLang and its features on its official documentation or repository.
Related vulnerabilities
Recent vulnerabilities recorded for sglang.
