CVE-2026-78147: ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization
A vulnerability was found in ggml-org llama.cpp bec4772f6. The impacted element is the function deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component ggml-RPC Server. Performing a manipulation of the argument op/opparams results in deserialization. The attack may be initiated remotely. This vulnerability is distinct from CVE-2026-34159 (GHSA-j8rj-fmpv-wcxw, PR #20908), which only added a buffer==nullptr rejection in createnode() and does not validate op or opparams. The reported GitHub issue was closed automatically due to inactivity.
Affected Software
Event History
Frequently Asked Questions
What attacker access is required to exploit this issue?
The attack may be initiated remotely and requires no privileges or user interaction according to the supplied severity vector. Exploitation involves manipulating the op or op_params arguments processed by the ggml-RPC Server.
Does the earlier create_node() buffer==nullptr rejection address this vulnerability?
No. The issue is explicitly distinct from CVE-2026-34159 and its associated change, which only rejected buffer==nullptr in create_node(). That change does not validate op or op_params.
What component should teams prioritize when assessing exposure?
Assess deployments of the ggml-RPC Server component in ggml-org llama.cpp, specifically code involving deserialize_tensor in ggml/src/ggml-rpc/ggml-rpc.cpp. The provided data identifies bec4772f6 as the affected version or revision.