Not scored
CVE-2026-3059
CVE-2026-3059
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
1.6%probability of exploitation in the next 30 days
Higher than 75% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
Coverage 1 article · 1 outlet
- AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCEThe Hacker News · first in our coverage · mentions it in passing