Beveiligingsadvies

CVE-2026-3989

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-12 11:37:48

Laatst bijgewerkt 2026-04-07 18:46:48

Toegewezen door certcc

CVSS-score 7.8

Status PUBLISHED

Beschrijving

SGLangs `replay_request_dump.py` contains an insecure pickle.load() without validation and proper deserialization. An attacker can take advantage of this by providing a malicious .pkl file, which will execute the attackers code on the device running the script.

← Alle CVE's bekijken Bekijk op cve.org ↗