Skip to content
OpenAdvisories
High · 7.5 CVE-2026-5757 EUVD-2026-39786GHSA-c839-jg98-xwx3

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

Published Jun 26, 2026 · Updated Jun 26, 2026 · Assigned by certcc

Description

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

Affected products

VendorProductAffectedFixed
Ollama AI Ollama v0.13.5 —

Advisories 1

References