Unauthenticated Arbitrary Code Execution in SGLang Runtime

Executive Summary

CVE-2026-93088 is a critical unauthenticated remote code execution vulnerability in SGLang's multimodal generation runtime. The disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() without validation or authentication.

Useful 0 Not Useful 0

Detection Guidance

Check if the SGLang disaggregated diffusion server is running and listening on a network interface. Use commands like 'netstat -tulnp | grep -E '0.0.0.0:|:.*5555' or 'ss -tulnp | grep -E '0.0.0.0:|:.*5555' to identify ZeroMQ ROUTER sockets bound to all interfaces. Inspect logs for unusual pickle.loads() calls or deserialization errors in the orchestrator component.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows any host with TCP access to the ZeroMQ frontend of a DiffusionServer head node to execute arbitrary code within the server process. It can lead to unauthorized access, data leakage, denial of service, or complete system compromise in systems using SGLang's disaggregated diffusion feature.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security such as GDPR and HIPAA due to unauthorized code execution capabilities, potential data breaches, and lack of proper access controls. It enables attackers to bypass authentication and manipulate systems handling sensitive data.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict network access to the ZeroMQ frontend port using firewalls or network policies. Disable or update the SGLang server to a patched version if available. Avoid binding to 0.0.0.0; use localhost or specific IPs instead. Disable disaggregated diffusion features if not required. Monitor for unauthorized access or code execution attempts.

Useful 0 Not Useful 0