Remote Code Execution in Ollama via Update Mechanism

Missing Signature Verification for Updates in Ollama

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3

Path Traversal leading to Remote Code Execution in Ollama

Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such…

An issue was discovered in Ollama before 0.1.46

Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF…

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder

Ollama Multi-Modal Model Image Processing NULL Pointer Dereference

Improper Validation of Array Index in ollama/ollama

Divide by Zero in ollama/ollama

NULL Pointer Dereference in ollama/ollama

Divide By Zero in ollama/ollama

Allocation of Resources Without Limits or Throttling in ollama/ollama

DoS using malicious gguf model file in ollama/ollama

An issue was discovered in Ollama before 0.1.46

An issue was discovered in Ollama before 0.1.34

An issue was discovered in Ollama through 0.3.14

extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory

Ollama Pull API name.go IsValid server-side request forgery

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious…

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language…

Ollama Model Pull API download.go server-side request forgery

Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow

Ollama Tensor Model Transfer transfer.go digestToPath path traversal