Vulnerability · Published Mar 12, 2026 · Assigned by certcc
CVE-2026-3989CVE-2026-3989
High 7.8
In plain English
A high-severity security flaw in SGLang from SGLang. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.5%top 58.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| PyPI | sglang | 0.5.10 | GHSA-hvwj-8w5g-28rg |
| PyPI | sglang | 0.5.10 | PYSEC-2026-3063 |