Live › vulnerability › CVE-2026-116467
Go to dashboardA flaw in the Mirostat sampler code in src/llama-sampler.cpp of llama.cpp up to 0.7.0 can be triggered to hit a reachable assertion. The sources say the attack can be launched remotely, and the impact stated is a crash-style assertion failure rather than code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-26 19:32 UTC. All times on this page are UTC.
Teams running llama.cpp up to 0.7.0 that accept sampling parameters from remote users may be exposed, since the sources describe the attack as remote. Local or batch use with fixed sampler settings is likely lower exposure, though the sources do not state this. Whether a default configuration reaches the Mirostat path is unknown.
No product ranges from the sources yet.
0.7.0; versions up to and including 0.7.0 are listed as affectedEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.
This page as .md · .json · in your agent: get_signal("CVE-2026-116467")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.