EUVD-2026-69410

llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service std::badalloc and HTTP 500 via a negative topn value in a POST request to /rerank...

CVE-2026-52132

llama.cpp through commit 97f06e9, when started with the --reranking flag, is susceptible to a denial of service when a remote attacker sends a POST request to the /rerank endpoint containing a negative top_n value . The negative value triggers a std::bad_alloc exception, resulting in an HTTP 500 ...