Read the docs
TI-2026-52758 Aliases CVE-2026-75090GHSA-9x3x-hjpw-2q3f

EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds

Priority MEDIUM 63CWE-119Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Passive
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
None · None · Low
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00688 52nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix Fixed Mistral.rs (EricLBuehler): 0.8.23

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
EricLBuehlerMistral.rs0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; 0.8.5; 0.8.6; 0.8.7; 0.8.8; 0.8.9; 0.8.10; 0.8.11; 0.8.12; 0.8.13; 0.8.14; 0.8.15; 0.8.16; 0.8.17; 0.8.18; 0.8.19; 0.8.20; 0.8.21; 0.8.220.8.23Patch availableCNA
  • Mistral.rs VendorEricLBuehler Affected 0.8.0; 0.8.1; 0.8.2; 0.8.3; 0.8.4; 0.8.5; 0.8.6; 0.8.7; 0.8.8; 0.8.9; 0.8.10; 0.8.11; 0.8.12; 0.8.13; 0.8.14; 0.8.15; 0.8.16; 0.8.17; 0.8.18; 0.8.19; 0.8.20; 0.8.21; 0.8.22 Fixed in 0.8.23 Patch available CNA

CPE names CNA · 1

CPEVersionsRoleVendor
cpe:2.3:a:ericlbuehler:mistral.rs:*:*:*:*:*:*:*:*——EricLBuehler
  • cpe:2.3:a:ericlbuehler:mistral.rs:*:*:*:*:*:*:*:* Versions — — ·EricLBuehler

Remediation

  • Fix · CNA Mistral.rs (EricLBuehler) Fixed in 0.8.23

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-75090
  2. 2026-10-03 Alias added: GHSA-9x3x-hjpw-2q3f

References

Exploit 1

Patch 3

Other 1

  • TI-2026-71457 Path traversal in EricLBuehler Mistral.rs calibration_apply CVSS 4.0MEDIUM 6.9
  • TI-2026-71456 Server-side request forgery in mistral.rs is_global_ip check CVSS 4.0MEDIUM 6.9
  • TI-2026-70737 Symlink following in mistral.rs code execution sandbox lets attackers escape CVSS 4.0HIGH 7.6
  • TI-2026-86088 Tool Call Injection via Delimiter Strings in mistral.rs Output Parsers CVSS 4.0LOW 2.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences