{"id":"CVE-2026-93034","revision":"a2e60beebf3242468fe1784a48180340","records":[{"revision":"a2e60beebf3242468fe1784a48180340","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-93034","aliases":[],"title":"CVE-2026-93034","description":"SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.","state":0,"publishedAt":"2026-10-08T14:00:09.084+00:00","modifiedAt":"2026-10-08T20:22:35.805+00:00","affected":[{"ecosystem":"Vendor product","name":"SGLang","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"SGLang\",\n                    \"product\": \"SGLang\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThanOrEqual\": \"v0.5.20\",\n                            \"versionType\": \"custom\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://github.com/sgl-project/sglang/tree/main","https://m00dy.sh/notes/disabling-pickle-did-not-remove-pickle?palette=mineral"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-93034","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-93034","identifiers":["CVE-2026-93034"]},"retained":false,"historicalAffected":[]}],"coverage":[]}