Skip to content
OpenAdvisories
High · 8.1 CVE-2026-43632 EUVD-2026-54287GHSA-3f2h-96vw-c84x

llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoints

Published Aug 6, 2026 · Updated Aug 14, 2026 · Assigned by VulnCheck

Description

llama.cpp builds b7492 through the latest b9060 contains a use-after-free vulnerability in llama-server affecting six tokenization endpoints (/tokenize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/count_tokens) that bypass the task queue and access ctx_server.vocab directly on HTTP worker threads. Attackers can exploit a time-of-check-time-of-use race condition where the main thread destroys and frees vocab after the synchronization lock is released but before the handler finishes using it, causing a crash or potential code execution when --sleep-idle-seconds is configured.

Affected products

VendorProductAffectedFixed
ggml-org llama.cpp b7492 – ≤ b9060 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 llama.cpp No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 llama.cpp No fix yet —
Ubuntu 26.04 LTS llama.cpp No fix yet —

References