CVE-2026-18581: ggml-org llama.cpp Jinja Minja Template parser.cpp assertion
A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected by this issue is some unknown functionality of the file common/jinja/parser.cpp of the component Jinja Minja Template Parser. Executing a manipulation with the input {{9|9|{ can lead to reachable assertion. The attack requires local access. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-18581?
The severity of CVE-2026-18581 is rated low at 3.3.
What are the potential impacts of CVE-2026-18581?
CVE-2026-18581 could lead to an assertion failure when specific input manipulations are executed.
How do I fix CVE-2026-18581?
To mitigate CVE-2026-18581, it is recommended to update the ggml-org llama.cpp library to a patched version that addresses this vulnerability.
What components are affected by CVE-2026-18581?
CVE-2026-18581 affects the Jinja Minja Template Parser found in the file common/jinja/parser.cpp of the ggml-org llama.cpp library.
Is exploitation of CVE-2026-18581 easy?
Exploitation of CVE-2026-18581 requires manipulation of input, but the overall risk is considered low.