Is CVE-2026-93088 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-93088 being exploited in the wild.

How severe is CVE-2026-93088?

Critical severity, with a CVSS score of 9.8, published 22 September 2026.

Is there a fix for CVE-2026-93088?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-93088 attacked?

It is attacked over the network, in a software library.

Am I affected by CVE-2026-93088?

Check whether you run SGLang at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-93088: SGLang unauthenticated arbitrary code execution in multimodal orchestrator

CVE-2026-93088 · Severity: critical · CVSS 9.8 · Published 2026-09-22

SGLang is a serving framework for large language and multimodal models. An unauthenticated remote attacker who can reach the disaggregated diffusion orchestrator's ZeroMQ ROUTER socket can execute arbitrary code on the server by sending a malicious serialized Python object, leading to complete system compromise.

Technologies: SGLang. Vendors: SGLang.

Quick answers

Is CVE-2026-93088 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-93088 being exploited in the wild.
How severe is CVE-2026-93088?: Critical severity, with a CVSS score of 9.8, published 22 September 2026.
Which products and versions are affected?: SGLang 0.5.14 and earlier.
Is there a fix for CVE-2026-93088?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-93088 attacked?: It is attacked over the network, in a software library.
Am I affected by CVE-2026-93088?: Check whether you run SGLang at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The DiffusionServer head node binds an unauthenticated ZeroMQ ROUTER socket and directly deserializes the final frame of incoming multipart messages using pickle.loads() without authentication or validation. An attacker with network access to the socket can craft a malicious pickle payload that executes arbitrary Python code in the server process context. No patches are currently available.

Affected products

SGLang SGLang 0.5.14 and earlier

Timeline

2026-07-03: disclosed: Reported via GitHub Security Advisory
2026-09-17: advisory: CERT/CC verified and assigned CVE-2026-93088
2026-09-22: other: Advisory published with supplementary findings

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.