OL
Vendor
ollama
39
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108836 | OL Ollama Ollama | 7.3 | Oct 12 | Ollama Pull API name.go IsValid server-side request forgery |
| CVE-2026-103663 | OL Ollama Ollama | 9.4 | Oct 8 | Path Traversal leading to Remote Code Execution in Ollama |
| CVE-2026-102697 | OL ollama ollama | 7.8 | Sep 29 | Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization |
| CVE-2026-86289 | OL Ollama Ollama | 4.3 | Sep 7 | Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow |
| CVE-2026-85180 | OL ollama ollama | 7.5 | Sep 3 | Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect |
| CVE-2026-65315 | OL Ollama Ollama | 7.5 | Jul 21 | Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser |
| CVE-2026-15685 | OL Ollama Ollama | 7.5 | Jul 13 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability |
| CVE-2026-5757 | OL Ollama Ollama | 7.5 | Jun 26 | There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine |
| CVE-2026-7482 | OL ollama ollama | 9.1 | May 4 | Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers |
| CVE-2026-42249 | OL Ollama Ollama | 9.8 | Apr 29 | Remote Code Execution in Ollama via Update Mechanism |
| CVE-2026-42248 | OL Ollama Ollama | 9.8 | Apr 29 | Missing Signature Verification for Updates in Ollama |
| CVE-2026-7020 | OL Ollama Ollama | 3.7 | Apr 26 | Ollama Tensor Model Transfer transfer.go digestToPath path traversal |
| CVE-2026-5530 | OL Ollama Ollama | 6.3 | Apr 5 | Ollama Model Pull API download.go server-side request forgery |
| CVE-2025-66960 | OL Ollama Ollama | 7.5 | Jan 21 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF… |
| CVE-2025-66959 | OL Ollama Ollama | 7.5 | Jan 21 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder |
| CVE-2025-15514 | OL Ollama Ollama | 7.5 | Jan 12 | Ollama Multi-Modal Model Image Processing NULL Pointer Dereference |
| CVE-2025-63389 | OL Ollama Ollama | 9.8 | Dec 18 | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3 |
| CVE-2025-44779 | OL Ollama Ollama | 6.6 | Aug 7 | An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull |
| CVE-2025-51471 | OL Ollama Ollama | 6.9 | Jul 22 | Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious… |
| CVE-2025-1975 | OL ollama/ollama ollama | 7.5 | May 16 | Improper Validation of Array Index in ollama/ollama |
| CVE-2024-8063 | OL ollama/ollama ollama | 7.5 | Mar 20 | Divide by Zero in ollama/ollama |
| CVE-2025-0312 | OL ollama/ollama ollama | 7.5 | Mar 20 | NULL Pointer Dereference in ollama/ollama |
| CVE-2024-12886 | OL ollama/ollama ollama | 7.5 | Mar 20 | Out-Of-Memory (OOM) Vulnerability in ollama/ollama |
| CVE-2025-0317 | OL ollama/ollama ollama | 7.5 | Mar 20 | Divide By Zero in ollama/ollama |
| CVE-2025-0315 | OL ollama/ollama ollama | 7.5 | Mar 20 | Allocation of Resources Without Limits or Throttling in ollama/ollama |
| CVE-2024-12055 | OL ollama/ollama ollama | 7.5 | Mar 20 | DoS using malicious gguf model file in ollama/ollama |
| CVE-2024-39719 | OL Ollama Ollama | 7.5 | Oct 31 | An issue was discovered in Ollama through 0.3.14 |
| CVE-2024-39720 | OL Ollama Ollama | 8.2 | Oct 31 | An issue was discovered in Ollama before 0.1.46 |
| CVE-2024-39721 | OL Ollama Ollama | 7.5 | Oct 31 | An issue was discovered in Ollama before 0.1.34 |
| CVE-2024-39722 | OL Ollama Ollama | 7.5 | Oct 31 | An issue was discovered in Ollama before 0.1.46 |
| CVE-2024-45436 | OL Ollama Ollama | 7.5 | Aug 29 | extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent directory |
| CVE-2024-37032 | OL Ollama Ollama | 8.8 | May 31 | Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such… |
| CVE-2024-28224 | OL Ollama Ollama | 6.6 | Apr 8 | Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language… |