CVE-2026-67987: Crmne ruby_llm vulnerability
crmne/rubyllm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polynomial-time regular expression denial-of-service conditions in think-tag response parsing on Ruby 3.1.x. A malicious or anomalous model response containing many unterminated <think> tags can cause excessive CPU consumption in two consecutive regular expressions and delay chat-completion processing
Affected Software
Event History
Frequently Asked Questions
What input is needed to trigger the excessive CPU consumption?
A model response must contain many unterminated <think> tags. The issue occurs while the library parses think-tag content during chat-completion processing.
Which runtime is identified as affected?
The reported condition applies to Ruby 3.1.x at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83.
What operational impact should users expect?
The two consecutive regular-expression evaluations can consume excessive CPU and delay chat-completion processing. The reported impact is denial of service through processing delay rather than a stated data-access or code-execution impact.