Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · SGLang

CVE-2026-7301: SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

criticalCVSS 3.1 9.8GHSA-gwv6-pq6m-p3rq

SGLang's multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

Published May 18, 2026 · Updated May 29, 2026

Affected packages

sglang

Ecosystem
PyPI
Affected
>= 0.5.5, <= 0.5.12
Fixed in
No patched version yet
Check
pip show sglang

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

SGLang's multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More SGLang vulnerabilities

All SGLang entries