CVE-2026-7301

Back Back to CVE browser

CRITICAL

Published May 18, 2026

9.8

CRITICAL

CVSS 3.1

EPSS 0.60%

Description

SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

Affected products

Vendor SGLang Product SGLang Default
unknown
Affected
- 5.10

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
SGLang	SGLang	unknown	Affected 5.10

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-502

Deserialization of Untrusted Data

References (5)

https://antiproof.ai/blog/three-rces-in-sglang
Permissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30765
Advisory
https://github.com/advisories/GHSA-gwv6-pq6m-p3rq
Advisory
https://github.com/sgl-project/sglang/tree/main/python/sglang
Product
https://nvd.nist.gov/vuln/detail/CVE-2026-7301

Link	Providers	Tags
https://antiproof.ai/blog/three-rces-in-sglang		Permissions Required
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-30765		Advisory
https://github.com/advisories/GHSA-gwv6-pq6m-p3rq		Advisory
https://github.com/sgl-project/sglang/tree/main/python/sglang		Product
https://nvd.nist.gov/vuln/detail/CVE-2026-7301