Is CVE-2026-86793 being exploited?

No public exploit is currently tracked.

Back

CVE-2026-86793

Description

SGLang allows unauthenticated pickle deserialization through /update_weights_from_tensor when no auth keys are configured, and the SafeUnpickler policy can be bypassed because builtins.import and builtins.getattr are resolvable, enabling code execution via pickle REDUCE.