CVE-2026-17501: ggml-org llama.cpp JSON-Schema-to-GBNF Conversion json-schema-to-grammar.cpp transform recursion
A flaw has been found in ggml-org llama.cpp e15efe0. This vulnerability affects the function transform of the file common/json-schema-to-grammar.cpp of the component JSON-Schema-to-GBNF Conversion. This manipulation causes uncontrolled recursion. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-17501?
The severity of CVE-2026-17501 is classified as medium with a score of 5.3.
What are the potential impacts of CVE-2026-17501?
CVE-2026-17501 could lead to resource allocation issues that can be exploited remotely.
How do I fix CVE-2026-17501?
To address CVE-2026-17501, it's recommended to update to the latest version of ggml-org llama.cpp that includes the fix for this vulnerability.
Who is affected by CVE-2026-17501?
CVE-2026-17501 affects users of the ggml-org llama.cpp software, specifically those using the JSON-Schema-to-GBNF Conversion functionality.
Can CVE-2026-17501 be exploited remotely?
Yes, CVE-2026-17501 can be exploited remotely, making it crucial for affected users to implement the necessary updates.