CVE-2026-7304CWE-502insecure-deserialization

CVE-2026-7304

Critical · published May 18, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
58.6
In the wild
Unconfirmed
What it is

SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads() will be deserialized without validation.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00875 · 58.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-05-18T16:16Z
Affected products (1)
ProductVersionsFixed in
lmsys/sglangall versions—
References (2)
https://antiproof.ai/blog/three-rces-in-sglang/ · [email protected]https://github.com/sgl-project/sglang/tree/main/python/sglang · [email protected]
EPSS history
Timeline
  • 18 MAY 10:39Z
    CVE-2026-7304
    cvelistv5