CVE-2026-39909— llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler
Quick assessment
Affected
ggml-org llama.cpp
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 llama.cpp 版本 b8585 之前，其 RPC 服务器的 GRAPH_RECOMPUTE 处理程序中存在一个“释放后使用”（use-after-free）漏洞。未经验证的远程攻击者可通过以下方式实现任意内存读写：首先存储一个计算图，接着释放该图所引用的缓冲区，然后通过攻击者可控的内容重新分配并占用已释放的内存。攻击者还可以发送 RPC 请求，触发对包含悬空指针（dangling pointers）的已存储计算图的重新执行，从而无需身份验证或用户交互即可实现完整的远程代码执行。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-39909
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler
Source: CVE Program / CVE List V5
Vulnerability Description
llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server's GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangling pointers, enabling full remote code execution without requiring authentication or user interaction.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
释放后使用
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-39909
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
Qwen3.6-35B-A3B
· 9087 chars
Pro+ exclusive includes:
Vulnerability reproduction recording (real sandbox build + trigger, exclusive)
In-depth vulnerability mechanism
Trigger conditions & impact
Full executable POC code
Exploit chain & mitigation
POC zip download
100+ AI POC generations per month
III. Intelligence Information for CVE-2026-39909
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-39909 (2)
Vendor Advisories for CVE-2026-39909 (1)
-
🔗 llama.cpp Use-After-Free in RPC GRAPH_RECOMPUTE Handler | Advisories | VulnCheck third-party-advisory
IV. Related Vulnerabilities
Same product: llama.cpp
-
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoin -
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server -
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclos -
CVE-2026-43629
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Rest -
CVE-2026-43628
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
Same vendor: ggml-org
-
CVE-2026-43632
llama.cpp b7492–b9060 Use-After-Free in Tokenization Endpoin -
CVE-2026-43631
llama.cpp b7492–b9060 Use-After-Free RCE via llama-server -
CVE-2026-43630
llama.cpp b5702–b7653 Out-of-Bounds Read Information Disclos -
CVE-2026-43629
llama.cpp b4882–b9058 Buffer Overflow in KV Cache State Rest -
CVE-2026-43628
llama.cpp b3978–b9058 Integer Underflow via DRY Sampler
Same weakness: CWE-416
-
CVE-2026-77235
Missing privilege check in SecureContext_FreeContext in Free -
CVE-2026-17118
Vulnerabilities in IBM AIX and PowerVM VIOS -
CVE-2026-76021
Chrome <151.0.7922.173 DOM UAF远程代码执行 -
CVE-2026-76017
Chrome<151.0.7922.173 Chromoting Use-After-Free致代码执行 -
CVE-2026-63380
Libevent: Null Pointer Dereference in `evws_new_session`
V. Comments for CVE-2026-39909
No comments yet