Ollama

Products

Exploited and recent CVEs

• CVE-2026-103663 Medium 6.9 Path Traversal leading to Remote Code Execution in Ollama 0.7%
• CVE-2026-102697 High 7.8 Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization 0.1%
• CVE-2026-85180 High 7.5 Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect 0.5%
• CVE-2026-65315 High 7.5 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser 0.8%
• CVE-2026-15685 High 7.5 Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability 0.7%
• CVE-2026-7482 Critical 9.1 Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers 2.2%
• CVE-2026-42249 High 7.7 Remote Code Execution in Ollama via Update Mechanism 1.0%
• CVE-2026-42248 High 7.7 Missing Signature Verification for Updates in Ollama 0.7%
• CVE-2025-15514 High 7.5 Ollama Multi-Modal Model Image Processing NULL Pointer Dereference 0.8%
• CVE-2025-1975 High 7.5 Improper Validation of Array Index in ollama/ollama 0.5%
• CVE-2024-8063 High 7.5 Divide by Zero in ollama/ollama 0.6%
• CVE-2025-0312 High 7.5 NULL Pointer Dereference in ollama/ollama 0.6%
• CVE-2024-12886 High 7.5 Out-Of-Memory (OOM) Vulnerability in ollama/ollama 0.7%
• CVE-2025-0317 High 7.5 Divide By Zero in ollama/ollama 14.5%
• CVE-2025-0315 High 7.5 Allocation of Resources Without Limits or Throttling in ollama/ollama 0.7%
• CVE-2024-12055 High 7.5 DoS using malicious gguf model file in ollama/ollama 0.8%