CVE-2026-3989

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

October 9, 2026

Last Seen

October 9, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical RCE Vulnerability in SGLang LLM Framework Disclosed69.0

SGLang has a critical remote code execution vulnerability, tracked as CVE-2026-93034, due to its ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() without type allowlisting or authentication. This vulnerability persists even when the SGLANG_USE_PICKLE_IPC fl...