CVE-2026-18581: ggml-org llama.cpp Jinja Minja Template parser.cpp assertion

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-03 · updated 2026-10-23
Weakness: CWE-617

Description

A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Affected products

ggml-org llama.cpp: e15efe0

References

https://drive.proton.me/urls/R8D8NGZ6Z0#C2cVZYn5z1Xc
https://github.com/ggml-org/llama.cpp/
https://github.com/ggml-org/llama.cpp/issues/25282
https://vuldb.com/cve/CVE-2026-18581
https://vuldb.com/submit/799118
https://vuldb.com/vuln/385409
https://vuldb.com/vuln/385409/cti
https://vuldb.com/submit/799118

Get alerted when CVE-2026-18581 or the next vulnerability affects your stack