CVE-2026-86793: unauthenticated RCE in SGLang via a SafeUnpickler bypass, disclosed with no patch shipped — the fourth critical CVE in AI inference infrastructure in four weeks · Jadid

Skip to content

JadidJust-in AI Developments, Incidents & Deadlines

Sunday, September 13, 2026 · 3 of 5

CVE-2026-86793: unauthenticated RCE in SGLang via a SafeUnpickler bypass, disclosed with no patch shipped — the fourth critical CVE in AI inference infrastructure in four weeks
Sep 11Security Infra

Read the full briefing · 15 stories