Arbitrary Code Execution Vulnerability in SGLang by SGL Project

CVE-2026-93034

What is CVE-2026-93034?

SGLang is susceptible to an arbitrary code execution vulnerability that arises from how the ZMQ message decoder handles PickleWrapper payloads. The issue is rooted in the unconditional deserialization process via pickle.loads() in the _maybe_unwrap_pickle function. This method lacks proper type allowlisting and authentication measures. Notably, even when SGLANG_USE_PICKLE_IPC is disabled, the vulnerability remains exploitable through the msgpack communication path. Additionally, the risk escalates to remote exploitation if data-parallel attention is enabled with a non-loopback --dist-init-addr setting, rendering systems utilizing SGLang vulnerable to potential attacks.

References