OL
Product
ollama
32
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 4High 21Medium 6Low 1
Watch
Add ollama to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-42249 | 9.8 | Apr 29 | Remote Code Execution in Ollama via Update Mechanism Affected: 0.12.10 through 0.17.5 |
| CVE-2026-42248 | 9.8 | Apr 29 | Missing Signature Verification for Updates in Ollama Affected: 0.12.10 through 0.17.5 |
| CVE-2025-63389 | 9.8 | Dec 18 | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3 Affected: through 0.12.3 |
| CVE-2026-7482 | 9.1 | May 4 | Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers Affected: before 0.17.1 |
Showing 4