CVE-2026-3989

Published: Mar 12, 2026Modified: Aug 10, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

Affected (1)

Products: Lmsys: Sglang

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Lmsys Sglang	Before 0.5.10

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (4)

https://github.com/sgl-project/sglang/blob/main/scripts/playground/replay_request_dump.py

Source: cret@cert.org

Product

https://github.com/sgl-project/sglang/pull/20904

Source: cret@cert.org

Issue TrackingPatch

https://github.com/sgl-project/sglang/releases/tag/v0.5.10

Source: cret@cert.org

Release Notes

https://orca.security/resources/blog/sglang-llm-framework-rce-vulnerabilities/

Source: cret@cert.org

ExploitThird Party Advisory

Timeline

No history available yet.