CVE-2026-14890

Katalog CVE

CVSS 9.1 · Critical EPSS 1,00%

Kerentanan Deserialization of Untrusted Data pada lmsys sglang. Skor CVSS 3.1 9.1 (Critical) menurut CISA ADP.

Deskripsi (NVD)

SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file that results in unauthenticated remote code execution when the feature is enabled and the service is reachable over the network.

Rincian

Terbit di NVD

16 Juli 2026

Terakhir diubah

10 Agustus 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber CISA ADP
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

1,00% peluang dieksploitasi; lebih tinggi dari 61,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.kb.cert.org/vuls/id/326070 mitigasi · advisory pihak ketiga
• http://vince.cert.org/vuls/id/326070 permissions required
• https://github.com/sgl-project/sglang/blob/main/python/sglang/srt/elastic_ep/expert_backup_manager.py product