Remote Assertion Vulnerability in ggml-org llama.cpp RPC Server
CVE-2026-86317

6.9MEDIUM

Key Information:

Vendor

Ggml-org

Status
Llama.cpp
Vendor
CVE Published:
7 September 2026

What is CVE-2026-86317?

A remote assertion vulnerability exists in ggml-org llama.cpp, specifically within the rpc_server::deserialize_tensor function found in ggml/src/ggml-rpc/ggml-rpc.cpp. This flaw can be exploited by manipulating the argument 'ne', which leads to a reachable assertion. The potential for exploitation suggests that attackers could remotely trigger this assertion failure, indicating a significant security risk for users of versions prior to 0.4.0. The associated GitHub issue concerning this vulnerability has been closed due to inactivity, yet the implications for software integrity remain a concern.

Affected Version(s)

llama.cpp 0.1

llama.cpp 0.2

llama.cpp 0.3

References

https://vuldb.com/vuln/399508
vdb-entrytechnical-description
https://vuldb.com/vuln/399508/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-86317
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

m00dy (VulDB User)
VulDB CNA Team
.