Ollama
Filed as: ollama
Newest record 2026-10-12 · 36 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Exploited or KEV-listed · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Ollama has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
Disclosed CVEs, no confirmed exploitation · 36
- closed7.3Ollama CVE-2026-108836: Server-side request forgery in Ollama pull API
Disclosed · since 12 Oct 2026 · CVE-2026-108836
AI - closed9.4Ollama Ollama vulnerable to path traversal leading to remote code execution
Disclosed · since 8 Oct 2026 · CVE-2026-103663
AI - closed8.5Ollama CVE-2026-102697: Ollama Agent Mode Bash Tool Authorization Bypass
Disclosed · since 29 Sep 2026 · CVE-2026-102697
AI - closed4.3Ollama CVE-2026-86289: Integer overflow vulnerability in Ollama GGUF decoder
Disclosed · since 7 Sep 2026 · CVE-2026-86289
AI - closed8.7Ollama CVE-2026-85180: Ollama redirect validation flaw allows arbitrary host requests during model pulls
Disclosed · since 3 Sep 2026 · CVE-2026-85180
AI - closed7.1Langflow IBM Langflow OSS Server-Side Request Forgery vulnerability in Ollama provider
Disclosed · since 5 Aug 2026 · CVE-2026-9081
AI - closed8.7Ollama CVE-2026-65315: Uncontrolled Memory Allocation in Ollama GGUF Parser
Disclosed · since 21 Jul 2026 · CVE-2026-65315
AI - closed7.5Ollama CVE-2026-15685: Ollama downloadBlob Denial-of-Service Vulnerability
Disclosed · since 13 Jul 2026 · CVE-2026-15685
AI - closed7.5Ollama CVE-2026-5757: Ollama model quantization engine information disclosure vulnerability
Disclosed · since 26 Jun 2026 · CVE-2026-5757
AI - closed6.3Open WebUI CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends
Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54021
AI - closed5.4Open WebUI CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass
Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44563
AI - closed9.1Ollama CVE-2026-7482: Ollama heap out-of-bounds read in GGUF model loader
Disclosed · since 4 May 2026 · CVE-2026-7482
AI - closed9.8Ollama CVE-2026-42249: Ollama for Windows update mechanism remote code execution
Disclosed · since 29 Apr 2026 · CVE-2026-42249
AI - closed9.8Ollama CVE-2026-42248: Ollama for Windows missing update signature verification
Disclosed · since 29 Apr 2026 · CVE-2026-42248
AI - closed5.6Ollama CVE-2026-7020: Ollama Path Traversal Vulnerability
Disclosed · since 26 Apr 2026 · CVE-2026-7020
AI - closed6.3Ollama CVE-2026-5530: Server-side request forgery flaw found in Ollama
Disclosed · since 5 Apr 2026 · CVE-2026-5530
AI - closed7.5Ollama CVE-2025-66959: Ollama Denial of Service via GGUF Decoder
Disclosed · since 21 Jan 2026 · CVE-2025-66959
AI - closed7.5Ollama CVE-2025-66960: Ollama Denial of Service via GGUF Metadata
Disclosed · since 21 Jan 2026 · CVE-2025-66960
AI - closed8.7Ollama CVE-2025-15514: Ollama null pointer dereference in image processing
Disclosed · since 12 Jan 2026 · CVE-2025-15514
AI - closed9.3Ollama CVE-2025-63389: Authentication bypass in Ollama API endpoints
Disclosed · since 18 Dec 2025 · CVE-2025-63389
AI - closed6.6Ollama CVE-2025-44779: Ollama arbitrary file deletion vulnerability
Disclosed · since 7 Aug 2025 · CVE-2025-44779
AI - closed6.9Ollama CVE-2025-51471: Ollama Cross-Domain Token Exposure Vulnerability
Disclosed · since 22 Jul 2025 · CVE-2025-51471
AI - closed7.5Ollama CVE-2025-1975: Ollama Server Vulnerable to Denial of Service Attack
Disclosed · since 16 May 2025 · CVE-2025-1975
AI - closed7.5Ollama CVE-2025-0315: Ollama Resource Exhaustion via Custom GGUF Models
Disclosed · since 20 Mar 2025 · CVE-2025-0315
AI - closed7.5Ollama CVE-2024-8063: Ollama Modelfile Processing Causes Denial of Service
Disclosed · since 20 Mar 2025 · CVE-2024-8063
AI - closed7.5Ollama CVE-2025-0317: Ollama Divide-By-Zero Error Leads to Server Crash
Disclosed · since 20 Mar 2025 · CVE-2025-0317
AI - closed7.5Ollama CVE-2025-0312: Ollama Null Pointer Dereference Causes Denial of Service
Disclosed · since 20 Mar 2025 · CVE-2025-0312
AI - closed7.5Ollama CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model
Disclosed · since 20 Mar 2025 · CVE-2024-12055
AI - closed7.5Ollama Ollama Server Vulnerable to Denial of Service via Crafted GZIP
Disclosed · since 20 Mar 2025 · CVE-2024-12886
AI - closed7.5Ollama CVE-2024-39722: Ollama path traversal exposes server files in api/push route
Disclosed · since 31 Oct 2024 · CVE-2024-39722
AI - closed7.5Ollama CVE-2024-39719: Ollama file existence disclosure via api/create route
Disclosed · since 31 Oct 2024 · CVE-2024-39719
AI - closed7.5Ollama CVE-2024-39721: Ollama CreateModelHandler vulnerable to infinite blocking via dev random
Disclosed · since 31 Oct 2024 · CVE-2024-39721
AI - closed8.8Ollama CVE-2024-39720: Ollama Out-of-bounds Read
Disclosed · since 31 Oct 2024 · CVE-2024-39720
AI - closed8.7Ollama CVE-2024-45436: Ollama zip extraction directory traversal vulnerability
Disclosed · since 29 Aug 2024 · CVE-2024-45436
AI - closed8.8Ollama CVE-2024-37032: Ollama digest format validation flaw
Disclosed · since 31 May 2024 · CVE-2024-37032
AI - closed8.8Ollama Ollama DNS Rebinding Vulnerability Allows API Access
Disclosed · since 8 Apr 2024 · CVE-2024-28224
AI
Fix status and fixed versions are recorded when a source states them (each record’s page shows what is known); check the vendor’s own advisory before acting.