CVE-2026-3989
SGLangs contains an insecure pickle.load() without validation and proper deserialization.
Published Mar 12, 2026 · updated Aug 10, 2026 · lmsys sglang
SGLangs contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Mar 12, 2026 · NIST NVD
Detected
SGLangs contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
Aug 10, 2026 · NIST NVD
Updated
SGLangs contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
Affected
- cpe lmsys/sglangversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2026-3989
Official CVE identifier
cve.org - NIST NVDVulnerability recordCVE-2026-3989
SGLangs contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
nvd.nist.gov