CVE-2026-93088CWE-502insecure-deserialization

CVE-2026-93088

Critical · published September 22, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.5th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-09-22T19:17Z
References (3)
https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/disaggregation/orchestrator.py · [email protected]https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/ · [email protected]https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/ · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 24 SEP 03:25Z
    EPSS moved — → 1%
    epss
  • 22 SEP 14:07Z
    CVE-2026-93088
    cvelistv5