CVE-2026-14890

SGLang , an open-source framework for serving large language models, contains a Pickle deserialization vulnerability in its expert-parallel backup subsystem . The issue stems from the expert_backup_manager.py component, which exposes a ZeroMQ PULL socket on a routable network interface without au...