CVE-2026-86317
Received Received - Intake

Reachable Assertion in llama.cpp RPC Server via ne Argument

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: VulDB

Description
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpc_server::deserialize_tensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be carried out remotely. The reported GitHub issue was closed automatically due to inactivity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-86317
EUVD
EUVD-2026-72459

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
ggml-org llama.cpp to 0.4.0 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-617 The product contains an assert() or similar statement that can be triggered by an attacker, which leads to an application exit or other behavior that is more severe than necessary.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a remote unauthenticated denial-of-service (DoS) vulnerability in the ggml-rpc component of llama.cpp. It occurs in the deserialize_tensor() function where an attacker can manipulate the tensor dimension ne[0] without validation. For quantized tensor types, sending ne[0]=1 triggers an assertion failure causing the server to crash with SIGABRT.

Detection Guidance

To detect this vulnerability, monitor for unexpected crashes or SIGABRT signals in the llama.cpp RPC server process. Check for connections to TCP port 50052 from untrusted sources. Use network scanning tools like nmap to identify vulnerable services running on port 50052.

Impact Analysis

An attacker can remotely crash the RPC server by sending crafted messages without authentication. This causes service disruption and potential downtime for applications relying on the RPC interface. The server may need manual restart after exploitation.

Mitigation Strategies

Immediately disable the RPC server component in llama.cpp if not required. Block external access to TCP port 50052 using firewall rules. Monitor for exploit attempts and update to a patched version once available. The issue remains unpatched as of the provided context.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86317. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart