CVE-2026-116467

llama.cpp Mirostat sampling can reach fatal assertions

ggml-org · llama.cpp Mirostat sampler

First documented disclosure · Review checkpoint

Summary

Non-finite sampling values can produce process crashes in the Mirostat paths.

Severity and exploitation evidence

Medium · 6.9/10 · CVSS 4.0. Severity source.

Exploitation not established: The reviewed primary sources document a vulnerability or controlled demonstration, not confirmed malicious exploitation.

Technical severity is not a measure of observed attacks or of risk to your deployment. Attempts, demonstrations, and successful compromise retain the qualifications in the source.

How the weakness works

Invalid numerical values reach a conversion or a distribution that requires a positive weight sum.

Conditions required

A request reaches Mirostat 1 or 2 sampling with the triggering numerical conditions.

Potential impact

Denial of service through process termination.

Affected versions and configurations

Through 0.7.0, according to the CNA.

Fix and mitigation status

No shipped fixed release established; the referenced proposal was closed without merging.

Practical next steps

Track upstream resolution and constrain exposure of affected sampling paths; do not treat the proposed patch as a released fix.

Operating lesson

Numerical edge cases must fail within the request rather than terminate the service.

Evidence and limits

Public October 5 proposal predates October 26 CVE publication. Tests used a vocabulary-only model. PR 29992 was closed October 14, unmerged, with no comments or reviews returned; the CNA’s non-response statement is not evidence of an available patch.

Sources