Vulnerability Details CVE-2026-3059
SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker, which deserializes untrusted data using pickle.loads() without authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 67.2%
CVSS Severity
CVSS v3 Score 9.8