CVE-2026-3989: High severity Lmsys Sglang vulnerability
SGLangs replayrequestdump.py contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-3989?
CVE-2026-3989 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2026-3989?
To fix CVE-2026-3989, upgrade to version 0.6.0 or later of the sglang package which addresses this vulnerability.
What does CVE-2026-3989 affect?
CVE-2026-3989 affects versions of the sglang package up to 0.5.9 installed via pip.
What is the primary risk associated with CVE-2026-3989?
The primary risk associated with CVE-2026-3989 is that an attacker could execute arbitrary code on the device through a malicious pickle file.
Is there a workaround for CVE-2026-3989?
A workaround for CVE-2026-3989 is to avoid using the insecure pickle.load() method and implement safer deserialization alternatives.