Skip to content
OpenAdvisories
High · 7.5 CVE-2026-52130 EUVD-2026-69412GHSA-8q78-m7w9-j45m

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

Published Sep 1, 2026 · Updated Sep 1, 2026 · Assigned by mitre

Description

llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 llama.cpp No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu 26.10 llama.cpp No fix yet —
Ubuntu 26.04 LTS llama.cpp No fix yet —

References