CVE-2024-34359

osv.dev • October 29, 2026

9.6 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H CVSS Calculator

llama-cpp-python is the Python bindings for llama.cpp. llama-cpp-python depends on class Llama in llama.py to load .gguf llama.cpp or Latency Machine Learning Models. The __init__ constructor built in the Llama takes several parameters to configure the loading and running of the model. Other than NUMA, LoRa settings , loading tokenizers, and hardware settings , __init__ also loads the chat template from targeted .gguf 's Metadata and furtherly parses it to llama_chat_format.Jinja2ChatFormatter.to_chat_handler() to construct the self.chat_handler for this model. Nevertheless, Jinja2ChatFormatter parse the chat template within the Metadate with sandbox-less jinja2.Environment , which is furthermore rendered in __call__ to construct the prompt of interaction. This allows jinja2 Server Side Template Injection which leads to remote code execution by a carefully constructed payload.

Git / github.com/abetlen/llama-cpp-python

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Malware Campaign Exploits Hugging Face for Crypto Mining A cryptomining and backdoor campaign has resurfaced, exploiting Hugging Face model repositories to hijack GPUs. Researchers at Pluto Security identified 31 malicious repositories across seven accounts, with the most popular model downloaded over 28,000 times. The attack leverages the 'trust_remote_code' option, allowing malicious Python code to execute on user machines upon model loading. This campaign has recorded more than 32,000 downloads collectively, targeting GPU hosts running self-hosted inference servers like Xinference and GPUStack. Despite previous takedowns, new repositories appeared within days, indicating the persistence of the threat. Scanning tools failed to detect the malicious code, as it does not match known malware signatures. The campaign's operator has reportedly earned around $5,000 in cryptocurrency from the mining activities. 2 sources 71

Extracted Entities

CVE-2024-34359

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)