p PatchFirst

CVE-2026-18581

CVE-2026-18581 · ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

CVSS 4.8 · Medium · EPSS 0.2%

Published
Updated

Stack: system

Affected products and versions

  • llama.cpp

    Versions
    • e15efe0: Affected

    No fix published

  • llama.cpp Debian:14

    Versions
    • 10108+dfsg-1
    • 10108+dfsg1-1
    • 10108+dfsg1-2
    • 10192+dfsg-1
    • 10192+dfsg-2
    • 10192+dfsg-2~exp1
    • 10271+dfsg-1
    • 10344+dfsg-1
    • 10438+dfsg-1
    • 1:0.1.2+dfsg-1~exp1
    • 1:0.2.0+dfsg1-1
    • 1:0.2.0+dfsg1-1~exp1
    • 1:0.4.0+dfsg-1
    • 1:0.4.1+dfsg-1
    • 1:0.5.0+dfsg-1
    • 1:0.5.0+dfsg-2
    • 1:0.6.0+dfsg-1
    • 1:0.6.0+dfsg-2
    • 1:0.7.0+dfsg-1
    • 1:0.7.0+dfsg-2
    • 5151+dfsg-1~exp2
    • 5151+dfsg-1~exp3
    • 5318+dfsg-1
    • 5318+dfsg-2
    • 5713+dfsg-1
    • 5760+dfsg-1
    • 5760+dfsg-2
    • 5760+dfsg-3
    • 5760+dfsg-4
    • 5882+dfsg-1
    • 5882+dfsg-2
    • 5882+dfsg-3
    • 5882+dfsg-3~exp1
    • 5882+dfsg-3~exp2
    • 5882+dfsg-3~exp3
    • 5882+dfsg-4
    • 6641+dfsg-1
    • 6641+dfsg-2
    • 6641+dfsg-3
    • 7593+dfsg-1
    • 7593+dfsg-2
    • 7593+dfsg-3
    • 7965+dfsg-1
    • 8064+dfsg-1
    • 8064+dfsg-2
    • 8461+dfsg-1
    • 8611+dfsg-1
    • 8681+dfsg-1
    • 8870+dfsg-1
    • 8941+dfsg-1
    • 9009+dfsg-1
    • 9071+dfsg-1
    • 9190+dfsg-1
    • 9413+dfsg-1
    • 9555+dfsg-1
    • 9601+dfsg-1
    • 9721+dfsg-1
    • 9895+dfsg-1
    • 9895+dfsg-2
    • 9895+dfsg-3
    • 9951+dfsg-1
    • 9951+dfsg-2
    • 9951+dfsg-3
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • llama.cpp Ubuntu:26.10

    Versions
    • 8681+dfsg-1
    • 9721+dfsg-1ubuntu1
    • 10438+dfsg-1
    • 10438+dfsg-1ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • llama.cpp Ubuntu:26.04:LTS

    Versions
    • 5882+dfsg-2
    • 8064+dfsg-1ubuntu1
    • 8681+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →