Description
SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SGLang | SGLang | 5.10 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | sglang | >= 0.5.5, <= 0.5.12 | — | GHSA-gwv6-pq6m-p3rq |