CVE-2026-7301

critical

Description

SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

References

References
More

https://kb.cert.org/vuls/id/326070

https://kb.cert.org/vuls/id/777338

https://github.com/sgl-project/sglang/tree/main/python/sglang

https://antiproof.ai/blog/three-rces-in-sglang/

Details

Source: Mitre, NVD

Published: 2026-05-18

Updated: 2026-05-19

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H