What is GHSA-w4hv-c72g-pqx6?

GHSA-w4hv-c72g-pqx6 is a security advisory published by GitHub Security Advisories with Critical severity. SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder...

Which CVE IDs does GHSA-w4hv-c72g-pqx6 cover?

GHSA-w4hv-c72g-pqx6 covers the following CVE IDs: CVE-2026-93034. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-w4hv-c72g-pqx6?

GHSA-w4hv-c72g-pqx6 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-w4hv-c72g-pqx6CriticalCVSS 9.8

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder...

Vendor

GitHub Security Advisories

Published

October 8, 2026

Last Modified

October 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-93034 →

📋 Description

SGLang contains an arbitrary code execution vulnerability caused by the ZMQ message decoder unconditionally deserializing PickleWrapper payloads via pickle.loads() in _maybe_unwrap_pickle without type allowlisting or authentication; this vulnerability persists via the msgpack path even when SGLANG_USE_PICKLE_IPC is disabled, and becomes remotely exploitable if data-parallel attention is enabled with a non-loopback --dist-init-addr setting.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-93034
https://github.com/sgl-project/sglang/tree/main
https://m00dy.sh/notes/disabling-pickle-did-not-remove-pickle?palette=mineral
https://github.com/advisories/GHSA-w4hv-c72g-pqx6