Ollama
Filed as: ollama
Records
36
Disclosed CVEs
36
Exploited (sev 3–4)
0
CISA KEV flagged
0
Newest record 2026-10-12 · 36 distinct CVE ids · open in the explorer (the explorer matches the first product a record names, so it can list fewer)
Patch now: confirmed exploitation or KEV · 0
Records at severity 3–4 (exploitation confirmed by CISA, the vendor or reporting) and records flagged as listed in CISA KEV. The KEV flag is the classifier’s cisa-kev tag or a source on the KEV catalog; it is recorded when the collector sees the listing, so a missing flag does not mean a CVE is absent from the catalog.
No record for Ollama has confirmed exploitation or a KEV flag.
Disclosures by month · last 24 months
█ ▁ ▁▁ ▁▄ ▅▃▃▃▁▄▃
Nov ’2429 disclosed · peak 6 in Mar ’25Oct ’26
Disclosed CVEs, no confirmed exploitation · 36
- 2026-10-12CVE-2026-108836CVE-2026-108836: Server-side request forgery in Ollama pull API2 Disclosedssrf · ollama
- 2026-10-08CVE-2026-103663Ollama vulnerable to path traversal leading to remote code execution2 Disclosedpath-traversal · rce
- 2026-09-29CVE-2026-102697CVE-2026-102697: Ollama Agent Mode Bash Tool Authorization Bypass2 Disclosedollama · agent · command_injection
- 2026-09-07CVE-2026-86289CVE-2026-86289: Integer overflow vulnerability in Ollama GGUF decoder2 Disclosedinteger-overflow · ollama
- 2026-09-03
- 2026-08-05CVE-2026-9081IBM Langflow OSS Server-Side Request Forgery vulnerability in Ollama provider2 Disclosedssrf · infra_vuln
- 2026-07-21CVE-2026-65315CVE-2026-65315: Uncontrolled Memory Allocation in Ollama GGUF Parser2 Discloseddenial_of_service
- 2026-07-13CVE-2026-15685CVE-2026-15685: Ollama downloadBlob Denial-of-Service Vulnerability2 Discloseddenial-of-service
- 2026-06-26CVE-2026-5757CVE-2026-5757: Ollama model quantization engine information disclosure vulnerability2 Disclosedinformation-disclosure
- 2026-06-17CVE-2026-54021CVE-2026-54021: Open WebUI proxy bypass routes calls to arbitrary Ollama backends2 Disclosedopen-webui · ollama · access-control
- 2026-05-08CVE-2026-44563CVE-2026-44563: Open WebUI Ollama Model Access Control Bypass2 Disclosedaccess_control · ollama
- 2026-05-04CVE-2026-7482CVE-2026-7482: Ollama heap out-of-bounds read in GGUF model loader2 Disclosedollama · gguf
- 2026-04-29CVE-2026-42249CVE-2026-42249: Ollama for Windows update mechanism remote code execution2 Disclosedollama · rce · path-traversal
- 2026-04-29CVE-2026-42248CVE-2026-42248: Ollama for Windows missing update signature verification2 Disclosedollama · update-mechanism
- 2026-04-26
- 2026-04-05
- 2026-01-21CVE-2025-66959CVE-2025-66959: Ollama Denial of Service via GGUF Decoder2 Discloseddenial-of-service · gguf
- 2026-01-21CVE-2025-66960CVE-2025-66960: Ollama Denial of Service via GGUF Metadata2 Discloseddenial-of-service · gguf
- 2026-01-12CVE-2025-15514CVE-2025-15514: Ollama null pointer dereference in image processing2 Disclosedinfra_vuln
- 2025-12-18CVE-2025-63389CVE-2025-63389: Authentication bypass in Ollama API endpoints2 Disclosedauth-bypass · ollama
- 2025-08-07CVE-2025-44779CVE-2025-44779: Ollama arbitrary file deletion vulnerability2 Disclosedollama · file-deletion
- 2025-07-22CVE-2025-51471CVE-2025-51471: Ollama Cross-Domain Token Exposure Vulnerability2 Disclosedollama · token-exposure
- 2025-05-16CVE-2025-1975CVE-2025-1975: Ollama Server Vulnerable to Denial of Service Attack2 Discloseddos · ollama
- 2025-03-20CVE-2025-0315CVE-2025-0315: Ollama Resource Exhaustion via Custom GGUF Models2 Disclosedollama · dos · gguf
- 2025-03-20CVE-2024-8063CVE-2024-8063: Ollama Modelfile Processing Causes Denial of Service2 Discloseddos · ollama · modelfile
- 2025-03-20CVE-2025-0317CVE-2025-0317: Ollama Divide-By-Zero Error Leads to Server Crash2 Discloseddos · ollama · gguf
- 2025-03-20CVE-2025-0312CVE-2025-0312: Ollama Null Pointer Dereference Causes Denial of Service2 Discloseddos · ollama · gguf
- 2025-03-20CVE-2024-12055CVE-2024-12055: Ollama allows out-of-bounds read via crafted GGUF model2 Discloseddenial-of-service · gguf
- 2025-03-20CVE-2024-12886Ollama Server Vulnerable to Denial of Service via Crafted GZIP2 Discloseddenial-of-service · infravuln
- 2024-10-31CVE-2024-39722CVE-2024-39722: Ollama path traversal exposes server files in api/push route2 Disclosedollama · path_traversal
- 2024-10-31CVE-2024-39719CVE-2024-39719: Ollama file existence disclosure via api/create route2 Disclosedollama · information_disclosure
- 2024-10-31CVE-2024-39721CVE-2024-39721: Ollama CreateModelHandler vulnerable to infinite blocking via dev random2 Disclosedollama · dos
- 2024-10-31
- 2024-08-29CVE-2024-45436CVE-2024-45436: Ollama zip extraction directory traversal vulnerability2 Disclosedpath-traversal · ollama
- 2024-05-31CVE-2024-37032CVE-2024-37032: Ollama digest format validation flaw2 Disclosedpath-traversal · ollama
- 2024-04-08CVE-2024-28224Ollama DNS Rebinding Vulnerability Allows API Access2 Discloseddns-rebinding · infra_vuln
This page lists what has been reported, not what to do about it. Versions and fixes are in each linked advisory; check the vendor’s own advisory before acting.