{"apiVersion":"1.0","identifier":"CVE-2026-39909","description":"llama.cpp before b8585 contains a use-after-free vulnerability in the RPC server-s GRAPH_RECOMPUTE handler that allows unauthenticated remote attackers to achieve arbitrary read and write access by storing a computation graph, freeing referenced buffers, and reclaiming freed memory with attacker-controlled content. Attackers can send RPC requests to trigger re-execution of stored graphs with dangling pointers, enabling full remote code execution without requiring authentication or user interaction.","publishedAt":"2026-08-21T17:16:30","lastModifiedAt":"2026-08-25T04:18:11","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-39909","cvssScore":8.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00769,"riskScore":0.87,"affectedProduct":"llama.cpp","affectedVersions":"cannotmatch","vulnerabilityType":"Library","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-39909","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-39909","en":"https://www.redsauce.net/en/cves/CVE-2026-39909","fr":"https://www.redsauce.net/fr/cves/CVE-2026-39909","pt":"https://www.redsauce.net/pt/cves/CVE-2026-39909","de":"https://www.redsauce.net/de/cves/CVE-2026-39909","sk":"https://www.redsauce.net/sk/cves/CVE-2026-39909","el":"https://www.redsauce.net/el/cves/CVE-2026-39909"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-39909"}}