CVE Feed

    Dashboard / CVE / CVE-2026-18581

    CVE-2026-18581

    A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

    Published:Aug 3, 2026
    Last Modified:Aug 3, 2026
    EPS:Aug 3, 2026
    EPSS Score:0.00112
    CVSS Score:3.3

    Affected Products

    Vendor
    Ggml-org
    Product
    Llama.cpp

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-617 Reachable Assertion

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-86317 (CVSS 6.9) — A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserial…
    CVE-2026-52130 (CVSS 7.5) — llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resul…
    CVE-2026-52132 (CVSS 7.5) — llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a d…
    CVE-2026-52131 (CVSS 7.5) — llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.…
    CVE-2026-78148 (CVSS 6.9) — A vulnerability was determined in ggml-org llama.cpp bec4772f6. This affects the function rpc_server::graph_co…
    CVE-2026-78147 (CVSS 6.9) — A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserialize_te…
    CVE-2026-39909 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2026-43632 (CVSS 9.2) — llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affect…
    CVE-2026-43631 (CVSS 9.2) — llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in the vocab pointer o…
    CVE-2026-43630 (CVSS 6.3) — llama.cpp builds b5702 through b7653 contain an out-of-bounds read vulnerability in the recurrent memory state…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High