Detections
Analytics
CVE-2026-7301
critical
Description
SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.
References
https://kb.cert.org/vuls/id/777338
https://github.com/sgl-project/sglang/tree/main/python/sglang