CVE-2026-93088

9.8 Critique

Publiée le 22/09/2026 à 17:17 · Modifiée le 22/09/2026 à 21:16 · En attente d'analyse NVD · Source : cret@cert.org

Description

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.

Traduire en français

Produits concernés

SGLang

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-502

Références

https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/disaggregation/orchestrator.py
https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/
https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories