CVE-2026-93034 | SGLang up to 0.5.20 ZMQ Message Decoder pickle.loads deserialization

October 8, 2026 Yanac

A vulnerability, which was classified as critical, was found in SGLang up to 0.5.20. This issue affects the function pickle.loads of the component ZMQ Message Decoder. The manipulation results in deserialization.

This vulnerability is reported as CVE-2026-93034. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More