CVE-2026-93088
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 22, 2026
Vendor
unknown
Description
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.