---
id: CVE-2026-93088
title: >-
  SGLang's multimodal generation runtime is vulnerable to unauthenticated
  arbitrary code execution because the disaggregated-diffusion orchestrator's
  DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network
  interface and …
summary: >-
  SGLang's multimodal generation runtime is vulnerable to unauthenticated
  arbitrary code execution because the disaggregated-diffusion orchestrator's
  DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network
  interface and …
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-502
vendor: SGLang
product: SGLang
affected:
  - SGLang >= 0.5.11 <= 0.5.14
published: '2026-09-22'
updated: '2026-09-22'
sourceUpdated: '2026-09-22T19:16:57.450'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93088'
references:
  - url: >-
      https://github.com/sgl-project/sglang/blob/main/python/sglang/multimodal_gen/runtime/disaggregation/orchestrator.py
    label: cret@cert.org
  - url: 'https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/'
    label: cret@cert.org
  - url: 'https://hacchoomiso.github.io/blog/SGLang/CVE-2026-93088/'
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
tags:
  - nvd
  - cve.org
  - exploit-available
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-09-22T18:45:41.206001Z'
ingestedAt: '2026-09-22T15:05:01.083Z'
epss: 0.00725
epssPercentile: 0.52039
---

## Overview

SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.