gcdRadar
archive/Breaches & attacks/AIR-2025-0150
closedclosed 25 Apr 2025Breaches & attacks3 Confirmed exploitationAI

Misconfigured Llama.cpp Servers Expose Sensitive User Prompts

llama.cpp

Misconfigured llama.cpp servers publicly exposed user prompts and interactive roleplay scenarios due to improper deployment. The exposure revealed sensitive data, though no real-world loss has been confirmed.

first report
11 Apr 2025
last update
11 Apr 2025

Timeline · 1

  1. 11 Apr 2025Reportedly Unsafe Deployment of Llama.cpp Reveals Interactive AI-Generated CSAM Roleplay Prompts

Sources · 1

Research and catalogues

  1. 2025-04-11
    Reportedly Unsafe Deployment of Llama.cpp Reveals Interactive AI-Generated CSAM Roleplay Prompts
    AI Incident Database · incidentdatabase.ai/cite/1020

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

lane
Breaches & attacks
AI role
Attack on AI
categories
Data leakInfrastructure vulnerability
severity
3 · Confirmed exploitation
targets
Open-weight model, Framework / tooling
owasp llm top 10
LLM02:2025 Sensitive Information DisclosureLLM03:2025 Supply Chain
mitre atlas
no technique for these categories
tags
llama.cppdata-leakmisconfiguration
dates
happened 11 Apr 2025 · first reported 11 Apr 2025
origin
AI Incident Database
Derived from the AI Incident Database (CC BY-SA 4.0).
record
confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Misconfigured Llama.cpp Servers Expose Sensitive User Prompts

https://gcdradar.vercel.app/incidents/misconfigured-llama-cpp-servers-expose-sensitive-user-prompt · AIR-2025-0150 · closed 2025-04-25

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation)
- Fix status: No fix needed
- First reported: 2025-04-11
- AI role: Attack on AI
- Products: llama.cpp

## Summary

Misconfigured llama.cpp servers publicly exposed user prompts and interactive roleplay scenarios due to improper deployment. The exposure revealed sensitive data, though no real-world loss has been confirmed.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-04-11: Reportedly Unsafe Deployment of Llama.cpp Reveals Interactive AI-Generated CSAM Roleplay Prompts (https://incidentdatabase.ai/cite/1020)

## Sources

- 2025-04-11 AI Incident Database: Reportedly Unsafe Deployment of Llama.cpp Reveals Interactive AI-Generated CSAM Roleplay Prompts https://incidentdatabase.ai/cite/1020

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. closed9.1
    Ollama CVE-2026-7482: Ollama heap out-of-bounds read in GGUF model loader

    Patch now · Disclosed · since 4 May 2026 · CVE-2026-7482

    AI
  2. closed8.8
    llama.cpp CVE-2025-49847: Buffer overflow in llama.cpp vocabulary loading

    Patch now · Disclosed · since 17 Jun 2025 · CVE-2025-49847

    AI
  3. closed7.5
    vLLM CVE-2025-30202: Data Exposure via ZeroMQ in Multi-Node vLLM Deployment

    Patch now · Disclosed · since 29 Apr 2025 · updated 30 Apr 2025 · CVE-2025-30202

    AI
  4. closed7.5
    LiteLLM CVE-2025-0330: LiteLLM Langfuse API Key Leakage

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0330

    AI
  5. closed7.5
    LiteLLM CVE-2024-9606: LiteLLM reveals portion of API key via logging file

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-9606

    AI
  6. closed4.3
    Open WebUI Open WebUI Improper Access Control Leads to Arbitrary Prompt Read

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-7045

    AI