AI agent vulnerability · SGLang

CVE-2026-3989: SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization

highCVSS 3.1 7.8GHSA-hvwj-8w5g-28rg

SGLangs replayrequestdump.py contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

Published Mar 12, 2026 · Updated Apr 7, 2026

Affected packages

sglang

Ecosystem: PyPI
Affected: <= 0.5.9
Fixed in: 0.5.10
Check: pip show sglang

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

SGLangs replay_request_dump.py contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More SGLang vulnerabilities

All SGLang entries