CVE-2026-43632

Concrete details found: In llama.cpp builds b7492–b9060, a use-after-free in llama-server affects six tokenization endpoints (/tokenize, /detokenize, /infill, /apply-template, /rerank, /anthropic/count_tokens). The vulnerability arises from a time-of-check-time-of-use race that allows bypassing t...