CVE-2026-34159
CRITICALllama.cpp: Unauthenticated RCE via GRAPH_COMPUTE buffer=0 bypass in llama.cpp RPC backend
Title source: cnaExploitation Summary
EIP tracks 3 public exploits for CVE-2026-34159. PoCs published by XZ1r0, rohithronanki, casp3r0x0.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-34159, targeting a vulnerability in the llama.cpp RPC server (version b8487). The exploit leverages a null-buffer bypass to achieve arbitrary read/write primitives, leading to a memory-only reverse shell via system() function hijacking.
Description
llama.cpp is an inference of several LLM models in C/C++. Prior to version b8492, the RPC backend's deserialize_tensor() skips all bounds validation when a tensor's buffer field is 0. An unauthenticated attacker can read and write arbitrary process memory via crafted GRAPH_COMPUTE messages. Combined with pointer leaks from ALLOC_BUFFER/BUFFER_GET_BASE, this gives full ASLR bypass and remote code execution. No authentication required, just TCP access to the RPC server port. This issue has been patched in version b8492.
Exploits (3)
This repository contains a functional exploit for CVE-2026-34159, targeting a vulnerability in the llama.cpp RPC server (version b8487). The exploit leverages a null-buffer bypass to achieve arbitrary read/write primitives, leading to a memory-only reverse shell via system() function hijacking.
The repository provides a technical analysis of CVE-2026-34159, detailing a buffer validation bypass in deserialize_tensor() in llama.cpp versions prior to b8492. It includes exploit chain details, Wireshark PCAPs, detection signatures, and lab reproduction steps, but no functional exploit code is present.
This repository contains a functional exploit for CVE-2026-34159, targeting a 0-click RCE vulnerability in the llama.cpp RPC server version b8487. The exploit leverages a null-buffer bypass to achieve arbitrary read/write primitives, ultimately leading to a memory-only reverse shell.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H