CVE-2026-75090
Full vulnerability record from the local CVENow database.
Description
A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended.
Severity
LOW
CVSS score
2.1
(v4.0)
Vulnerability status
Deferred
Source identifier
Published
2026-08-18 02:17:30.333000
Last modified
2026-10-22 22:10:00.250000
View original CVE JSON
{
"id": "CVE-2026-75090",
"sourceIdentifier": "[email protected]",
"published": "2026-08-18T02:17:30.333",
"lastModified": "2026-10-22T22:10:00.250",
"vulnStatus": "Deferred",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability was detected in EricLBuehler Mistral.rs up to 0.8.22. Affected by this issue is the function convert_gguf_to_hf_tokenizer of the file mistralrs-core/src/gguf/gguf_tokenizer.rs of the component GGUF Tokenizer. The manipulation of the argument eos_token_id/bos_token_id/unknown_token_id results in out-of-bounds read. The attack can be executed remotely. The exploit is now public and may be used. Upgrading to version 0.8.23 can resolve this issue. The patch is identified as cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Upgrading the affected component is recommended."
},
{
"lang": "es",
"value": "Se detectó una vulnerabilidad en EricLBuehler Mistral.rs hasta la versión 0.8.22. Afectada por este problema está la función convert_gguf_to_hf_tokenizer del archivo mistralrs-core/src/gguf/gguf_tokenizer.rs del componente GGUF Tokenizer. La manipulación del argumento eos_token_id/bos_token_id/unknown_token_id provoca una lectura fuera de límites. El ataque puede ejecutarse de forma remota. El exploit ahora es público y puede ser utilizado. La actualización a la versión 0.8.23 puede resolver este problema. El parche se identifica como cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e. Se recomienda actualizar el componente afectado."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "EricLBuehler",
"product": "Mistral.rs",
"cpes": [
"cpe:2.3:a:ericlbuehler:mistral.rs:*:*:*:*:*:*:*:*"
],
"modules": [
"GGUF Tokenizer"
],
"versions": [
{
"version": "0.8.0",
"status": "affected"
},
{
"version": "0.8.1",
"status": "affected"
},
{
"version": "0.8.2",
"status": "affected"
},
{
"version": "0.8.3",
"status": "affected"
},
{
"version": "0.8.4",
"status": "affected"
},
{
"version": "0.8.5",
"status": "affected"
},
{
"version": "0.8.6",
"status": "affected"
},
{
"version": "0.8.7",
"status": "affected"
},
{
"version": "0.8.8",
"status": "affected"
},
{
"version": "0.8.9",
"status": "affected"
},
{
"version": "0.8.10",
"status": "affected"
},
{
"version": "0.8.11",
"status": "affected"
},
{
"version": "0.8.12",
"status": "affected"
},
{
"version": "0.8.13",
"status": "affected"
},
{
"version": "0.8.14",
"status": "affected"
},
{
"version": "0.8.15",
"status": "affected"
},
{
"version": "0.8.16",
"status": "affected"
},
{
"version": "0.8.17",
"status": "affected"
},
{
"version": "0.8.18",
"status": "affected"
},
{
"version": "0.8.19",
"status": "affected"
},
{
"version": "0.8.20",
"status": "affected"
},
{
"version": "0.8.21",
"status": "affected"
},
{
"version": "0.8.22",
"status": "affected"
},
{
"version": "0.8.23",
"status": "unaffected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV40": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "4.0",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
"baseScore": 2.1,
"baseSeverity": "LOW",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "NONE",
"userInteraction": "PASSIVE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"subAvailabilityImpact": "NONE",
"exploitMaturity": "PROOF_OF_CONCEPT",
"confidentialityRequirement": "NOT_DEFINED",
"integrityRequirement": "NOT_DEFINED",
"availabilityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"valueDensity": "NOT_DEFINED",
"vulnerabilityResponseEffort": "NOT_DEFINED",
"providerUrgency": "NOT_DEFINED"
}
}
],
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"baseScore": 4.3,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "LOW"
},
"exploitabilityScore": 2.8,
"impactScore": 1.4
}
],
"cvssMetricV2": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2026-08-18T13:30:44.977963Z",
"id": "CVE-2026-75090",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-119"
},
{
"lang": "en",
"value": "CWE-125"
}
]
}
],
"references": [
{
"url": "https://github.com/EricLBuehler/mistral.rs/",
"source": "[email protected]"
},
{
"url": "https://github.com/EricLBuehler/mistral.rs/commit/cd5297e2ea5cb27c790bdcf2f3c2f1064a81d55e",
"source": "[email protected]"
},
{
"url": "https://github.com/EricLBuehler/mistral.rs/issues/2225",
"source": "[email protected]"
},
{
"url": "https://github.com/EricLBuehler/mistral.rs/pull/2282",
"source": "[email protected]"
},
{
"url": "https://github.com/EricLBuehler/mistral.rs/releases/tag/v0.8.23",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/cve/CVE-2026-75090",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/submit/877270",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/391327",
"source": "[email protected]"
},
{
"url": "https://vuldb.com/vuln/391327/cti",
"source": "[email protected]"
}
]
}