CVE-2024-28224

2024-04-0819:15:07

[email protected]

web.nvd.nist.gov

ollama

dns rebinding

unauthorized access

api

chat

model deletion

denial of service

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).