CVE-2026-124996

A weakness has been identified in Turboderp-org ExLlamaV3 up to 1.6.3. The impacted element is the function routing_sel_norm_kernel of the file exllamav3/exllamav3_ext/routing.cu of the component hash-MoE routing. This manipulation of the argument gate.tid2eid causes out-of-bounds read. Remote exploitation of the attack is possible. Upgrading to version 1.6.4 is sufficient to resolve this issue. Patch name: c9a57ae832a3035e264e0a412e1daf4ebb699b98. Upgrading the affected component is recommended.

• CWE-119
• CWE-125

• https://github.com/turboderp-org/exllamav3/
• https://github.com/turboderp-org/exllamav3/commit/c9a57ae832a3035e264e0a412e1daf4ebb699b98
• https://github.com/turboderp-org/exllamav3/issues/526
• https://github.com/turboderp-org/exllamav3/releases/tag/v1.6.4
• https://vuldb.com/cve/CVE-2026-124996
• https://vuldb.com/submit/1040627
• https://vuldb.com/vuln/433166
• https://vuldb.com/vuln/433166/cti
• https://github.com/turboderp-org/exllamav3/issues/526

Published

Nov 9, 2026

Last Modified

Nov 14, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-12497The Paid Membership Plugin, Ecommerce, User Registration For…7.5
• CVE-2026-124970Improper Neutralization of Special Elements used in an SQL C…9.3
• CVE-2026-124987A vulnerability has been found in mikefarah yq up to 4.53.3.…6.3
• CVE-2026-124992A vulnerability was identified in nushell up to 0.116.1. Imp…3.3
• CVE-2026-124993An incorrect authorization vulnerability in the Security Adv…5.3
• CVE-2026-124994A security flaw has been discovered in Turboderp-org ExLlama…6.3
• CVE-2026-124999A security vulnerability has been detected in braindecode up…6.3
• CVE-2026-1250The Court Reservation – Manage Your Court Bookings Online pl…7.5
• CVE-2026-12500The WP Travel Engine WordPress plugin before 6.8.2 does not…7.5
• CVE-2026-12501The WP Travel Engine WordPress plugin before 6.8.2 does not …5.3
• CVE-2026-12502Improper Privilege Management (CWE-269) in `/usr/bin/ltsudo`…8.4
• CVE-2026-12503Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter`…9.2