Skip to content
OpenAdvisories

Vendor

Ollama

16 known vulnerabilities.

Products

Ollama 9 ollama/ollama 7
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.4
    CVE-2026-103663 Public exploit

    Path Traversal leading to Remote Code Execution in Ollama

    Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An unauthenticated remote attacker can specify a path traversal sequence as a layer digest, causing a malicious …

    Ollama Ollama
  • High 7.8
    CVE-2026-102697 Public exploit

    Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

    Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to properly parse shell syntax. Attackers who can influence model output through prompt injection can …

    Ollama Ollama
  • Critical 9.1
    CVE-2026-7482 Public exploit Scanner template

    Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

    Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file's actual length; during quantization i…

    Ollama Ollama k8sgpt mods Wolfi Go
  • High 7.7
    CVE-2026-42249 Public exploit

    Remote Code Execution in Ollama via Update Mechanism

    Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading updates, the application constructs local file paths using values derived from HT…

    Ollama Ollama
  • High 7.7
    CVE-2026-42248 Public exploit

    Missing Signature Verification for Updates in Ollama

    Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verification routine unconditionally returns success so no digital signature or trust…

    Ollama Ollama
  • High 7.5
    CVE-2024-12886 Public exploit

    Out-Of-Memory (OOM) Vulnerability in ollama/ollama

    An Out-Of-Memory (OOM) vulnerability exists in the `ollama` server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the `ollama` server crashing. The vulnerability is present i…

    Ollama ollama/ollama github.com/ollama/ollama Go