CVE-2026-93034 CVE-2026-93034
Attackers can execute arbitrary code via unsafe pickle deserialization in SGLang when data-parallel attention is enabled with non-loopback addresses.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-93034?
CVE-2026-93034 is a critical unsafe deserialization vulnerability in SGLang, published on 8 Oct 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.
Weakness: CWE-502
Which versions are affected by CVE-2026-93034?
How do I fix CVE-2026-93034?
No fix has been published for CVE-2026-93034 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-93034 being exploited?
There is no known exploitation of CVE-2026-93034 in the wild and no public exploit code.
Sources
Also known as GHSA-w4hv-c72g-pqx6.