CVE-2026-93034: CVE-2026-93034

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-10-08 · updated 2026-10-08
Weakness: CWE-502

Description

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.

Affected products

SGLang: through v0.5.20

References

https://github.com/sgl-project/sglang/tree/main
https://m00dy.sh/notes/disabling-pickle-did-not-remove-pickle?palette=mineral

Get alerted when CVE-2026-93034 or the next vulnerability affects your stack