CVE-2026-93088: SGLang SGLang vulnerability
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Deployments using the disaggregated-diffusion orchestrator's DiffusionServer are exposed when its ZeroMQ ROUTER socket is bound to a network interface and can receive attacker-controlled messages.
What does an attacker need to exploit this issue?
An attacker needs network access to the unauthenticated ZeroMQ ROUTER socket and the ability to send a multipart message whose final frame contains a malicious pickle payload. No authentication is performed before that frame is passed to pickle.loads().
How can I check whether my deployment has the vulnerable behavior?
Inspect the multimodal generation runtime's disaggregation orchestrator for DiffusionServer configuration that binds a ZeroMQ ROUTER socket to a network interface. Confirm whether the final frame of received multipart messages reaches pickle.loads() before validation.