CVE-2026-116467: ggml-org llama.cpp Mirostat Sampler llama-sampler.cpp assertion
A security flaw has been discovered in ggml-org llama.cpp up to 0.7.0. Affected by this vulnerability is an unknown functionality of the file src/llama-sampler.cpp of the component Mirostat Sampler. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The project was informed of the problem early through a pull request but has not reacted yet.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Deployments of ggml-org llama.cpp up to version 0.7.0 that use the Mirostat Sampler component are potentially exposed. The issue can be triggered remotely.
Does exploitation require authentication or user interaction?
No authentication or user interaction is required according to the supplied CVSS vector. The attack complexity is rated low.
What is the expected impact if the issue is exploited?
The reported outcome is a reachable assertion in src/llama-sampler.cpp, with availability impact rated low. No confidentiality or integrity impact is indicated.
Is a fix available?
The provided information does not identify a fixed version or an available patch. It states that the project was notified through a pull request but had not responded at the time of reporting.