UNKNOWN NVD

CVE-2026-52132

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_alloc and HTTP 500) via a negative top_n value in a POST request to /rerank.

References

https://blog.ph4nt0m.xyz/ko/cves/cve-2026-52132/
https://github.com/ggml-org/llama.cpp

Published: 2026-09-01 · Source: NVD · Feed updated: 2026-09-01

This unknown severity vulnerability was published on 2026-09-01 via NVD.

vulnfeed aggregates 11520 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.