Remote Vulnerability in ggml-org's llama.cpp Affecting Mirostat Sampler Functionality
CVE-2026-116467

6.9MEDIUM

Key Information:

Vendor

Ggml-org

Status
Llama.cpp
Vendor
CVE Published:
26 October 2026

What is CVE-2026-116467?

A security flaw exists in the functionality of the Mirostat Sampler component found in ggml-org's llama.cpp, up to version 0.7.0. This vulnerability allows for reachable assertion manipulations, which could be exploited remotely. Although the project was informed of this issue through a pull request, no actions have been taken to address it yet, leaving systems vulnerable to potential attacks.

Affected Version(s)

llama.cpp 0.1

llama.cpp 0.2

llama.cpp 0.3

References

https://vuldb.com/vuln/426361
vdb-entry
https://vuldb.com/vuln/426361/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-116467
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jasmine-tim (VulDB User)
VulDB CNA Team
.