CVE-2024-28224

2024-04-0800:00:00

mitre

www.cve.org

ollama

dns rebinding

vulnerability

remote access

api

unauthorized

chat

model

denial of service

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).