CVE-2025-51471: Ollama Cross-Domain Token Exposure Vulnerability

# CVE-2025-51471: Ollama Cross-Domain Token Exposure Vulnerability

https://gcdradar.vercel.app/incidents/cve-2025-51471-ollama-cross-domain-token-exposure-vulnerabil · AIR-2025-0317 · closed 2025-07-22

- Lane: Patch now
- Severity: 2 (Disclosed vulnerability)
- Fix status: Fix status unknown
- First reported: 2025-07-22
- AI role: Attack on AI
- Products: Ollama
- CVE ids: CVE-2025-51471
- CVSS: 6.9

## Summary

Ollama contains a vulnerability in authorization token handling that allows remote attackers to steal tokens and bypass access controls via a malicious realm value. A patch has been released to address the issue.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2025-07-22: CVE-2025-51471: Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication… (https://nvd.nist.gov/vuln/detail/CVE-2025-51471)
- 2025-07-22: CVE-2025-51471: Ollama vulnerable to Cross-Domain Token Exposure (https://github.com/advisories/GHSA-x9hg-5q6g-q3jr)

## Sources

- 2025-07-22 GitHub Advisory Database: CVE-2025-51471: Ollama vulnerable to Cross-Domain Token Exposure https://github.com/advisories/GHSA-x9hg-5q6g-q3jr
- 2025-07-22 NVD: CVE-2025-51471: Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication… https://nvd.nist.gov/vuln/detail/CVE-2025-51471

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.