CVE-2026-75090: A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_ggu
Summary
A vulnerability was found in Mistral.rs (a tool for running AI models) versions up to 0.8.22 in a function that converts tokenizers (components that break text into pieces for AI processing). An attacker could send specially crafted input that causes the program to read data from memory locations it shouldn't access, and this attack can be done remotely over the internet.
Solution / Mitigation
Upgrade to version 0.8.23, which resolves this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e.
Vulnerability Details
4.3(medium)
EPSS: 0.0%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
network
low
none
required
August 17, 2026
Classification
Affected Vendors
Related Issues
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-75090
First tracked: August 18, 2026 at 02:10 AM
Classified by LLM (prompt v3) · confidence: 85%