Skip to content
OpenAdvisories

Vendor

Ollama

16 known vulnerabilities.

Products

Ollama 9 ollama/ollama 7
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-103663 Public exploit

    Path Traversal leading to Remote Code Execution in Ollama

    Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious …

    Ollama Ollama
  • Critical 9.1
    CVE-2026-7482 Public exploit Scanner template

    Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

    Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file's actual length; during quantization i…

    Ollama Ollama k8sgpt mods Wolfi Go