Critical severity · published Dec 18, 2025
CVE-2025-63389
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3
9.8
CVSS
0.7%
EPSS
No
On KEV
Description
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 53% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OL
Ollama · Ollama
through 0.12.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-63389
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-63389
Third Party Advisory
https://gist.github.com/Cristliu/48dae561696374744d9fced07a544ecd
gist.github.com
https://gist.github.com/Cristliu/b6f4d070fb27932f581be1aadc0923e7
Issue Tracking
https://github.com/ollama/ollama/issues
More from Ollama
9.8
CVE-2026-42249
Remote Code Execution in Ollama via Update Mechanism
9.8
CVE-2026-42248
Missing Signature Verification for Updates in Ollama
9.4
CVE-2026-103663
Path Traversal leading to Remote Code Execution in Ollama
9.1
CVE-2026-7482
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
8.8
CVE-2024-37032
Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such…