CVE-2026-7301

nvd.nist.gov • July 17, 2026

SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.

Denotes Vulnerable Software Are we missing a CPE here? Please let us know .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Remote Code Execution Vulnerabilities in SGLangs Runtime Two critical vulnerabilities, CVE-2026-7304 and CVE-2026-7301, have been identified in the SGLangs multimodal generation runtime. Both vulnerabilities, published on 2026-05-18, allow unauthenticated remote code execution (RCE) under specific conditions. CVE-2026-7304 exploits the --enable-custom-logit-processor option, where Python objects are deserialized without validation. CVE-2026-7301 involves the scheduler's ROUTER socket binding to 0.0.0.0 by default, allowing RCE when exposed to the internet. These vulnerabilities affect systems using SGLangs runtime, potentially impacting a wide range of applications. As of today, no patches or mitigations have been reported, leaving systems vulnerable to exploitation. 2 sources 67

Extracted Entities

CVE-2026-7301

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)