Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · SGLang

CVE-2026-3060: SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

criticalCVSS 3.1 9.8GHSA-jx93-g359-86wm

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

Published Mar 12, 2026 · Updated Apr 7, 2026

Affected packages

sglang

Ecosystem
PyPI
Affected
<= 0.5.9
Fixed in
0.5.10
Check
pip show sglang

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More SGLang vulnerabilities

All SGLang entries