A GGUF file's chat template can be a server-side template injection: a static check for CVE-2026-5760
A GGUF model file is not just weights. It carries metadata, and one of those metadata keys — tokenizer.chat_template — is a Jinja2 template string. If a server renders that template with an unsandboxed Jinja environment, a model file you downloaded can run code on the machine that loads it. That is…
Read the full story at DEV Community — Machine Learning ↗
Timeline · 1 report
- 2026-10-21 10:24 · DEV Community — Machine Learning
A GGUF file's chat template can be a server-side template injection: a static check for CVE-2026-5760