{"data":{"id":"66254a7b-08e2-4fcc-956e-982d1c565f61","title":"CVE-2024-34359: llama-cpp-python is the Python bindings for llama.cpp. `llama-cpp-python` depends on class `Llama` in `llama.py` to…","summary":"llama-cpp-python, the Python bindings for llama.cpp, is affected by CVE-2024-34359. The Llama constructor in llama.py loads the chat template from a .gguf model's metadata and passes it to Jinja2ChatFormatter, which parses it with a non-sandboxed jinja2.Environment and renders it in __call__. A carefully constructed template payload therefore enables server-side template injection and remote code execution.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-34359","publishedAt":"2024-05-14T15:38:45.093Z","cveId":"CVE-2024-34359","cweIds":["CWE-76"],"cvssScore":"9.6","cvssSeverity":"critical","severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":["llama-cpp-python@>= 0.2.30, <= 0.2.71 (fixed: 0.2.72)"],"affectedPackageNames":["llama-cpp-python"],"affectedPackageRefs":["pypi:llama-cpp-python"],"affectedVendors":[],"affectedVendorsRaw":["llama-cpp-python","llama.cpp","Jinja2"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"llama-cpp-python remote code execution via chat template in GGUF metadata","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.26001,"epssCheckedAt":"2026-11-04T06:10:15.713Z","kevDateAdded":null,"advisoryAliases":["GHSA-56xg-wfcc-g829"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:56:06.332Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2024-05-10T04:59:24.581Z","daysToFix":-4,"fixCheckedAt":"2026-10-29T21:46:01.283Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity","availability","safety"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.95,"researchCategory":null,"atlasIds":null,"fixes":[{"ecosystem":"pypi","name":"llama-cpp-python","fixedVersion":"0.2.72","matchedVersion":"0.2.72","fixReleasedAt":"2024-05-10T04:59:24.581Z","daysToFix":-4,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:46:01.133Z"}]}}