What’s Vulnerable › Vulnerabilities

CVE-2026-52130

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-01 · updated 2026-09-04
• Weakness: CWE-674

Description

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

Affected products

• ggml-org llama.cpp: through b5693

References

• https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52130/
• https://github.com/ggml-org/llama.cpp

Get alerted when CVE-2026-52130 or the next vulnerability affects your stack