CVE-2026-78148

A flaw was found in the ggml-RPC Server component of llama.cpp. A remote attacker can exploit this vulnerability by performing a specific manipulation, leading to a null pointer dereference. This can result in a Denial of Service (DoS), making the affected system unavailable.

Red Hat Product Security has determined that this vulnerability affects the ggml-RPC Server component of llama.cpp, which is an optional feature that requires explicit build-time enablement (GGML_RPC=ON) and operator action to start the ggml-rpc-server binary. The vulnerability does not affect the core llama.cpp library or typical usage patterns of Python bindings (llama-cpp-python) or Rust bindings (llama-cpp-2) that are bundled in Red Hat products.

Most Red Hat products that include llama.cpp dependencies (RHEL AI containers, goose package) bundle only the inference library bindings and do not build, ship, or expose the vulnerable RPC server component. These products are not affected by this vulnerability.

The impact is rated Moderate with CVSS score 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) because exploitation requires the optional RPC server to be explicitly enabled and running, and results only in denial of service of that server process, not the broader system. The low availability impact (A:L) reflects that this affects an opt-in feature rather than a critical system component.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.