Summary
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ollama ausnutzen, um beliebigen Programmcode auszuführen.
Product
Ollama ist eine Open-Source-Runtime zum lokalen Ausführen von Large Language Models (LLMs)
Vulnerabilities 1
-
High 7.8CVE-2026-102697 Public exploit
Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to properly parse shell syntax. Attackers who can influence model output through prompt injection can …
Revision history
-
#1
Initiale Fassung
References
-
Ollama 0.31.2 Release Notes vom 2026-09-29
https://github.com/ollama/ollama/releases/tag/v0.31.2
-
GitHub Security Advisory GHSA-44M8-PR79-3734 vom 2026-09-29
https://github.com/advisories/GHSA-44M8-PR79-3734