CVE-2026-52132

Summary

llama.cpp through commit 97f06e9, when started with the –reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/ggml-org/llama.cpp
• https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52132/

• ←Previous
• Next→