Database/AI/ML frameworks & serving
SGLang (`replay_request_dump.py`): Insecure `pickle.load()` on a `.pkl` dump
CVE-2026-3989AI/ML frameworks & servingcurated
Impact
Insecure pickle.load() on a .pkl dump
Who can reach it
Customer-supplied dump file replayed by an operator during debugging
What to do
Upgrade; operator tooling that ingests tenant artifacts is a privilege-escalation path into the provider plane
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.