Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-93088: SGLang runtime can run malicious code remotely
CVE-2026-93088 · published 18 days ago
Summary
The SGLang multimodal generation system accepts network messages on a socket that is open to anyone and processes them with a function that can execute code. An attacker could send specially crafted data and cause the system to run arbitrary code, potentially taking control of the server. Apply the vendor's security update or block external access to the affected socket until a fix is deployed.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| sglang | sglang | <= 0.5.14 |
Original advisory text
CVE-2026-93088
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.
References
- https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/
- https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/run...
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/93xxx/CVE-2026-93088... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-93088 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically
- Gives an attacker full control
Severity
9.8
Critical
Type
CWE-502Deserialization of Untrusted Data
Timeline
Published22 Sep 2026
Updated9 Oct 2026
First seen22 Sep 2026
Track software like this
Free during beta