The vulnerability CVE-2026-75090 affects the EricLBuehler Mistral.rs project, specifically versions up to and including 0.8.22. It is located in the convert_gguf_to_hf_tokenizer function within the mistralrs-core/src/gguf/gguf_tokenizer.rs file. The issue arises from improper handling of the eos_token_id, bos_token_id, and unknown_token_id arguments, leading to an out-of-bounds read condition. This flaw can be triggered remotely without privileges or user interaction, and public exploit code exists. The vulnerability is fixed in version 0.8.23, with the patch identified by commit cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e.

An attacker can remotely trigger an out-of-bounds read in the GGUF Tokenizer component by manipulating specific token ID arguments. This may lead to information disclosure or application instability. The CVSS 4.0 base score is 5.3 (medium severity), reflecting network attack vector, low complexity, no privileges required, and limited impact on confidentiality.

Upgrade EricLBuehler Mistral.rs to version 0.8.23 or later, which contains the official fix for this vulnerability. No other mitigations are indicated by the vendor advisory.