CVE-2026-3060

CVE-2026-3060

SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.

Affected

SGLang

CVSS v3.1 CNA

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.50% chance of exploitation in the next 30 days, 74th percentile

Published

2026-03-12

Updated

2026-04-07

Proof-of-concept exploits (1)

• gouldnicholas/CVE-2026-7669-PoC1★ · 2026-05-05

Security advisories

• https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities
• advisories/GHSA-jx93-g359-86wm
• sgl-project/sglang/blob/main/python/sglang/srt/disaggregation/encode_receiver.py

References

• CVE Record
• NVD entry

Related

• CVE-2025-10164
• CVE-2026-3059
• CVE-2026-4660
• CVE-2026-5817
• CVE-2026-7669