| Component | llama.cpp |
| Severity | high (CVSS 7.5) |
| CVSS vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
| Published (NVD) | 2026-10-29 |
| Affected versions | >= b2877, < b11935 from the CVE Program record written by the CNA that assigned the CVE |
| Fixed in | b11935 |
| Weakness | CWE-248 |
| CISA KEV | not listed |
Versions, checked against NVD
NVD's record (status: Awaiting Analysis) lists no affected versions of llama.cpp for this CVE. The ranges above come from the CVE record written by VulnCheck, the CNA that assigned the CVE.
NVD description
llama.cpp b2877 before b11935 contains an uncaught exception vulnerability in the ggml-rpc server that allows unauthenticated remote attackers to crash the rpc-server by sending oversized message lengths. After the HELLO handshake, attackers can send a command such as SET_TENSOR with a length above std::vector::max_size(), triggering an uncaught std::length_error that aborts the process and denies service to all clients.
What to do
- Upgrade llama.cpp to
b11935or later. - Do not expose the component's API or UI to the internet without authentication in front of it.
Sources
- NVD: CVE-2026-119052
- https://github.com/ggml-org/llama.cpp
- https://github.com/ggml-org/llama.cpp/blob/8542e94350f0ade01644db6f1d1520da3814dafd/ggml/src/ggml-rpc/ggml-rpc.cpp#L344-L356
- https://github.com/ggml-org/llama.cpp/commit/7ecb57f7adbea2928aa468ad2aecf05b10725ad4
- https://github.com/ggml-org/llama.cpp/pull/31204
- https://github.com/ggml-org/llama.cpp/releases/tag/b11935
- https://www.vulncheck.com/advisories/llama-cpp-b2877-before-b11935-ggml-rpc-server-dos-via-oversized-recv-msg-length