Exploit discussion active in current signal (1 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-09-22 | 2 | Disclosure2 |
| 2026-09-23 | 1 | PoC1 |
| 2026-09-24 | 1 | Disclosure1 |
New CVE: CVE-2026-93088 SGLang pre-auth RCE (CVSS 9.8) https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/ Huge thanks to @CERTCC (VINCE) for their help!
Post summary
The tweet announces a new CVE (CVE-2026-93088) affecting SGLang, describing it as a pre-authentication RCE with a CVSS score of 9.8, and provides a link to a blog post with technical details.
【CVE-2026-93088 · CVSS 9.8 超危】SGLang DiffusionServer未认证任意代码执行漏洞导致远程代码执行 在 SGLang 的多模态生成运行时中，其 disaggregated-diffusion 编排器的 DiffusionServer 组件存在严重安全缺陷… https://www.sectrend.com.cn/intel-2026-09-23.html#cve-2026-93088
Post summary
The text announces CVE-2026-93088, a critical remote code execution vulnerability in SGLang DiffusionServer with a CVSS score of 9.8, describing it as an unauthenticated arbitrary code execution flaw.
An unauthenticated socket in SGLang leads straight to arbitrary code execution (CVSS 9.8). CVE-2026-93088 sits in SGLang's diffusion orchestrator, which binds an open ZeroMQ socket to the network and passes incoming message frames directly to pickle.loads(). Anyone who can reach it gets code execution, no login needed. Proof-of-concept exploit code is already public. Affects SGLang 0.5.11. Update now. Details: http://vulntracker.io/cves/CVE-2026-93088 #SGLang #CVE #AI #InfoSec #CyberSecurity
Post summary
The tweet reports CVE-2026-93088 in SGLang, describing an unauthenticated ZeroMQ socket leading to arbitrary code execution with CVSS 9.8, notes a public PoC exploit, and urges users to update to version 0.5.11.
SGLang's unauthenticated code execution record carries no CVSS score. The denial of service published three seconds later carries 5.9. The unpickle sink is still in 0.5.20. No exploitation reported. https://severitydaily.com/sglang-cve-2026-93088-pickle-zeromq-range-ends-0-5-14-still-in-0-5-20/
Post summary
The post discloses an unauthenticated code execution flaw in SGLang lacking a CVSS score and a related DoS issue scored 5.9, noting the vulnerability persists in version 0.5.20 and that no exploitation has been reported.