CyberRota Analysis
AI-GeneratedThe multimodal generation runtime of SGLang is vulnerable to unauthenticated arbitrary code execution due to the binding of an unauthenticated ZeroMQ ROUTER socket, which allows attackers to send crafted multipart messages that are processed without validation. This flaw can lead to the execution of arbitrary code on the server, posing significant risks to the integrity and confidentiality of the system. Organizations utilizing SGLang's runtime should prioritize addressing this vulnerability to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestrator's DiffusionServer binds an unauthenticated ZeroMQ ROUTER socket to a network interface and passes the final frame of received multipart messages directly to pickle.loads() before any validation occurs.