CVE-2026-14890

The SGLang framework contains a pickle deserialization vulnerability (CVE-2026-14890) within its expert-parallel backup subsystem . The issue stems from a ZeroMQ PULL socket in expert_backup_manager.py binding to an external IP address without authentication or deserialization safeguards. An atta...