| CVE-2026-103663 |
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by…
|
6.9
Medium
|
Oct 8, 2026 |
| CVE-2026-102697 |
Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode…
|
8.5
High
|
Sep 29, 2026 |
| CVE-2026-85180 |
Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to…
|
8.7
High
|
Sep 3, 2026 |
| CVE-2026-65315 |
Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows…
|
8.7
High
|
Jul 21, 2026 |
| CVE-2026-15685 |
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
|
7.5
High
|
Jul 13, 2026 |
| CVE-2026-7482 |
Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader
|
9.1
Critical
|
May 4, 2026 |
| CVE-2026-42249 |
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of…
|
7.7
High
|
Apr 29, 2026 |
| CVE-2026-42248 |
Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables
|
7.7
High
|
Apr 29, 2026 |
| CVE-2025-15514 |
Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal…
|
8.7
High
|
Jan 12, 2026 |
| CVE-2024-39722 |
An issue was discovered in Ollama before 0.1.46
|
7.5
High
|
Oct 31, 2024 |
| CVE-2024-39721 |
An issue was discovered in Ollama before 0.1.34
|
7.5
High
|
Oct 31, 2024 |
| CVE-2024-39720 |
An issue was discovered in Ollama before 0.1.46
|
8.2
High
|
Oct 31, 2024 |
| CVE-2024-39719 |
An issue was discovered in Ollama through 0.3.14
|
7.5
High
|
Oct 31, 2024 |
| CVE-2024-45436 |
extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the parent…
|
9.1
Critical
|
Aug 29, 2024 |