Not scored
CVE-2026-3060
CVE-2026-3060
Status
- Not in CISA KEV
Exploit probabilityEPSSchecked 25 Oct
1.5%probability of exploitation in the next 30 days
Higher than 74% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
SGLang' encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module, which deserializes untrusted data using pickle.loads() without authentication.
Coverage 1 article · 1 outlet
- AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCEThe Hacker News · first in our coverage · mentions it in passing