CVE-2026-3989CWE-502insecure-deserialization

CVE-2026-3989

High · published March 12, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
40.4
In the wild
Unconfirmed
What it is

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00479 · 40.4th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-03-12T16:15Z
Affected products (1)
ProductVersionsFixed in
lmsys/sglang< 0.5.100.5.10
References (4)
https://github.com/sgl-project/sglang/blob/main/scripts/playground/replay_request_dump.py · [email protected]https://github.com/sgl-project/sglang/pull/20904 · [email protected]https://github.com/sgl-project/sglang/releases/tag/v0.5.10 · [email protected]https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/ · [email protected]
EPSS history
Timeline
  • 12 MAR 11:37Z
    CVE-2026-3989
    cvelistv5