CVE-2026-3060

critical

Description

SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

References

References
More

https://thehackernews.com/2026/03/ai-flaws-in-amazon-bedrock-langsmith.html

https://kb.cert.org/vuls/id/665416

https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/

https://github.com/sgl-project/sglang/releases/tag/v0.5.10

https://github.com/sgl-project/sglang/pull/20904

https://github.com/sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py

Details

Source: Mitre, NVD

Published: 2026-03-12

Updated: 2026-04-07

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H