CVE-2026-93088 CVE-2026-93088
Unauthenticated attackers can execute arbitrary code via unsafe pickle deserialization in the SGLang multimodal generation runtime.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-93088?
CVE-2026-93088 is a critical unsafe deserialization vulnerability in SGLang, published on 22 Sep 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.
Weakness: CWE-502
Which versions are affected by CVE-2026-93088?
How do I fix CVE-2026-93088?
Apply the vendor's patch.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2026-93088 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-93088 exists.
Sources
Also known as GHSA-xv76-mrpv-26pg.