CVE-2026-78147: Deserialization in ggml-org llama.cpp

The vulnerability exists in the deserialize_tensor function within ggml/src/ggml-rpc/ggml-rpc.cpp of the ggml-RPC Server component in the ggml-org llama.cpp project. An attacker can remotely manipulate the op/op_params arguments during deserialization, potentially leading to security issues. This vulnerability differs from CVE-2026-34159, which only added a buffer==nullptr rejection in create_node() but did not validate op or op_params. The issue was reported but the GitHub issue was closed automatically due to inactivity. No known exploits are reported in the wild.

The vulnerability allows remote attackers to manipulate deserialization parameters, which may lead to partial compromise of confidentiality, integrity, and availability as indicated by the CVSS vector (VC:L, VI:L, VA:L). The attack requires no privileges and no user interaction. The overall CVSS score is 6.9 (medium severity).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the GitHub issue was closed due to inactivity and no patch or fix links are provided, users should monitor official ggml-org llama.cpp channels for updates. No official fix or temporary workaround is currently documented.