Vulnerability · Published Sep 7, 2026 · Assigned by VulDB

CVE-2026-86317ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion

Medium 5.3

In plain English

A medium-severity security flaw in llama.cpp from ggml-org. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)5.3Medium

Exploit odds (30 days)0.7%top 46.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be carried out remotely. The reported GitHub issue was closed automatically due to inactivity.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Debian:14	llama.cpp	no fix listed	DEBIAN-CVE-2026-86317
Ubuntu:26.04:LTS	llama.cpp	no fix listed	UBUNTU-CVE-2026-86317
Ubuntu:26.10	llama.cpp	no fix listed	UBUNTU-CVE-2026-86317

Affected products (as reported)

Vendor	Product	Versions
ggml-org	llama.cpp	0.10.20.30.4.0

Weakness: CWE-617 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:X/RC:R

References

VDB-399508 | ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion vdb-entry, technical-description
VDB-399508 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-86317 | CVE Analysis and Report third-party-advisory
Submit #908271 | ggml-org llama.cpp master e9fa0781f Assertion third-party-advisory
https://github.com/ggml-org/llama.cpp/issues/25288 issue-tracking
https://github.com/ggml-org/llama.cpp/ product