Tool call execution through user prompt injection (CSRF) of the llama-server Web UI

Published: Jul 20 2026

A user prompt injection vulnerability (CSRF) in the llama-server (llama.cpp) Web UI (Reprompt-like) allows attackers to inject arbitrary user prompt with query parameter (?q=...), potentially leading to arbitrary shell command execution, data exfiltration, etc. (through tool calls).

llama.cpp quickstart (part 2)

Published: Jul 16 2026

How to quickly use llama.cpp for LLM inference (part 2). This is a follow-up of a previous post on the same topic.

llama.cpp quickstart

Published: May 14 2025

How to quickly use llama.cpp for LLM inference (no GPU needed).