Remote Code Execution Vulnerability in SGLangs Multimodal Generation Runtime Scheduler
CVE-2026-7301

9.8CRITICAL

Key Information:

Vendor

Sglang

Status
Sglang
Vendor
CVE Published:
18 May 2026

What is CVE-2026-7301?

The SGLangs multimodal generation runtime scheduler’s ROUTER socket is configured to bind to 0.0.0.0 by default. This misconfiguration allows incoming messages to be processed by a vulnerable sink that invokes pickle.loads(), which could lead to unintended code execution if the service is exposed to the internet. Ensuring proper socket binding and rigorous input validation is essential to mitigate the risk of remote code execution.

Affected Version(s)

SGLang 5.10

References

https://github.com/sgl-project/sglang/tree/main/python/sg...
https://antiproof.ai/blog/three-rces-in-sglang/

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.