8.5
Élevée
CVE-2026-102697 Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode…
Description
Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism that fails to properly parse shell syntax. Attackers who can influence model output through prompt injection can execute additional shell commands by appending control operators like semicolons or logical operators to approved commands, bypassing the session approval requirement.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ollama 0.14 | 0.14.0 → < 0.31.2 | 0.31.2 |
Autres CVE de Ollama
Les 14 CVE de Ollama →
CVE-2026-103663
Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by…
6.9
Moyenne
CVE-2026-85180
Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to…
8.7
Élevée
CVE-2026-65315
Ollama (HEAD f0078ae) contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows…
8.7
Élevée
CVE-2026-15685
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
7.5
Élevée