GHSA-gwv6-pq6m-p3rq

Source

https://github.com/advisories/GHSA-gwv6-pq6m-p3rq

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-gwv6-pq6m-p3rq/GHSA-gwv6-pq6m-p3rq.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-gwv6-pq6m-p3rq

Aliases

Published

2026-05-18T12:31:47Z

Modified

2026-06-29T12:26:50Z

Severity

9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket

Details

SGLang's multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

Database specific

{
    "cwe_ids":  [
        "CWE-502"
    ],
    "github_reviewed":  true,
    "github_reviewed_at":  "2026-05-29T17:23:09Z",
    "nvd_published_at":  "2026-05-18T12:16:16Z",
    "severity":  "CRITICAL"
}

References

Affected packages

PyPI / sglang

Package

Name: sglang; View open source insights on deps.dev
Purl: pkg:pypi/sglang

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0.5.5

Last Affected

0.5.12

Affected versions

0.*

0.5.5

0.5.5.post1

0.5.5.post2

0.5.5.post3

0.5.6

0.5.6.post1

0.5.6.post2

0.5.7

0.5.8

0.5.8.post1

0.5.9

0.5.10rc0

0.5.10

0.5.10.post1

0.5.11

0.5.12

Database specific

source

"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-gwv6-pq6m-p3rq/GHSA-gwv6-pq6m-p3rq.json"