Описание
SGLanG: Multimodal scheduler deserializes untrusted pickle data on 0.0.0.0 ROUTER socket
SGLang's multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.
Пакеты
Наименование
sglang
pip
Затронутые версииВерсия исправления
>= 0.5.5, <= 0.5.12
Отсутствует
Связанные уязвимости
CVSS3: 9.8
nvd
3 месяца назад
SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enabling RCE when exposed to the internet.