CVE-2026-110695 turboderp CVE debrief

Who should care

Defenders responsible for systems using turboderp ExLlamaV2 up to 0.3.2 should assess exposure and prioritize verification and patching. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify ExLlamaV2 versions 0.3.0, 0.3.1, and 0.3.2 for vulnerability and apply patches or mitigations as available from the vendor.

Why it matters

Defenders should prioritize verifying ExLlamaV2 versions 0.3.0, 0.3.1, and 0.3.2 for vulnerability and apply patches or mitigations as available from the vendor. The exploit is public and may be used, and defenders should monitor for potential attacks.

• Verify ExLlamaV2 versions for vulnerability
• Apply patches or mitigations as available
• Monitor for public exploit usage and potential attacks

Technical summary

The vulnerability is caused by a buffer overflow in the STFile.get_tensor function of the exllamav2/stloader.py file in the Safetensors Tensor Loader component of turboderp ExLlamaV2 up to 0.3.2. The attack can be carried out remotely by manipulating the data_offsets argument. The vulnerability affects ExLlamaV2 versions 0.3.0, 0.3.1, and 0.3.2, and defenders should prioritize verifying these versions and applying patches or mitigations as available from the vendor. The exploit is public and may be used, and defenders should monitor for potential attacks.

Defensive priority

Defenders should prioritize verifying the affected versions of ExLlamaV2 and applying patches or mitigations as available.

Recommended defensive actions

• Verify ExLlamaV2 versions 0.3.0, 0.3.1, and 0.3.2 for vulnerability
• Apply patches or mitigations as available from the vendor
• Monitor for public exploit usage and potential attacks
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2. The affected function is STFile.get_tensor in the file exllamav2/stloader.py. The exploit is public and may be used. Evidence is limited to the provided source corpus and CVE record. Defenders should verify ExLlamaV2 versions 0.3.0, 0.3.1, and 0.3.2 for vulnerability and apply patches or mitigations as available from the vendor.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.