ollama

Records22

1. closed7.3
   Ollama CVE-2026-108836: Server-side request forgery in Ollama pull API

   Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-108836

   AI
2. closed8.5
   Ollama CVE-2026-102697: Ollama Agent Mode Bash Tool Authorization Bypass

   Patch now · Disclosed · since 29 Sep 2026 · CVE-2026-102697

   AI
3. closed4.3
   Ollama CVE-2026-86289: Integer overflow vulnerability in Ollama GGUF decoder

   Patch now · Disclosed · since 7 Sep 2026 · CVE-2026-86289

   AI
4. closed6.3
   Open WebUI CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends

   Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54021

   AI
5. closed5.4
   Open WebUI CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass

   Patch now · Disclosed · since 8 May 2026 · updated 15 May 2026 · CVE-2026-44563

   AI
6. closed9.1
   Ollama CVE-2026-7482: Ollama heap out-of-bounds read in GGUF model loader

   Patch now · Disclosed · since 4 May 2026 · CVE-2026-7482

   AI
7. closed9.8
   Ollama CVE-2026-42249: Ollama for Windows update mechanism remote code execution

   Patch now · Disclosed · since 29 Apr 2026 · CVE-2026-42249

   AI
8. closed9.8
   Ollama CVE-2026-42248: Ollama for Windows missing update signature verification

   Patch now · Disclosed · since 29 Apr 2026 · CVE-2026-42248

   AI
9. closed9.3
   Ollama CVE-2025-63389: Authentication bypass in Ollama API endpoints

   Patch now · Disclosed · since 18 Dec 2025 · CVE-2025-63389

   AI
10. closed6.6
    Ollama CVE-2025-44779: Ollama arbitrary file deletion vulnerability

    Patch now · Disclosed · since 7 Aug 2025 · CVE-2025-44779

    AI
11. closed6.9
    Ollama CVE-2025-51471: Ollama Cross-Domain Token Exposure Vulnerability

    Patch now · Disclosed · since 22 Jul 2025 · CVE-2025-51471

    AI
12. closed7.5
    Ollama CVE-2025-1975: Ollama Server Vulnerable to Denial of Service Attack

    Patch now · Disclosed · since 16 May 2025 · CVE-2025-1975

    AI
13. closed7.5
    Ollama CVE-2025-0315: Ollama Resource Exhaustion via Custom GGUF Models

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0315

    AI
14. closed7.5
    Ollama CVE-2024-8063: Ollama Modelfile Processing Causes Denial of Service

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-8063

    AI
15. closed7.5
    Ollama CVE-2025-0317: Ollama Divide-By-Zero Error Leads to Server Crash

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0317

    AI
16. closed7.5
    Ollama CVE-2025-0312: Ollama Null Pointer Dereference Causes Denial of Service

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2025-0312

    AI
17. closed7.5
    Ollama CVE-2024-39722: Ollama path traversal exposes server files in api/push route

    Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39722

    AI
18. closed7.5
    Ollama CVE-2024-39719: Ollama file existence disclosure via api/create route

    Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39719

    AI
19. closed7.5
    Ollama CVE-2024-39721: Ollama CreateModelHandler vulnerable to infinite blocking via dev random

    Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39721

    AI
20. closed8.8
    Ollama CVE-2024-39720: Ollama Out-of-bounds Read

    Patch now · Disclosed · since 31 Oct 2024 · CVE-2024-39720

    AI
21. closed8.7
    Ollama CVE-2024-45436: Ollama zip extraction directory traversal vulnerability

    Patch now · Disclosed · since 29 Aug 2024 · CVE-2024-45436

    AI
22. closed8.8
    Ollama CVE-2024-37032: Ollama digest format validation flaw

    Patch now · Disclosed · since 31 May 2024 · CVE-2024-37032

    AI