A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the local Ollama instance serving an AI agent and plant hidden instructions inside the model itself. The findings were shared with The Hacker News ahead of...

Ollama - Remote Code Execution

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. id: CVE-2024-37032 info: name: Ollama ...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: seaweedfs-fips, bento-fips, fortio-fips, seaweedfs, seaweedfs-operator-fips, rclone-fips, mattermost-fips, pdfcpu, bento, kitty, fortio, nemo, seaweedfs-operator, kubescape, seaweedfs-rocksdb, gitea, seaweedfs-rocksdb-fips, mailpit-fips, mattermost, gitea-fips, rclon...

GO-2024-2901 vulnerabilities

Vulnerabilities for packages: ollama...

GO-2025-4251 vulnerabilities

Vulnerabilities for packages: ollama-fips, ollama, k8sgpt, mods...

GO-2025-3824 vulnerabilities

Vulnerabilities for packages: ollama-fips, ollama, k8sgpt, mods...

GO-2026-4815 vulnerabilities

Vulnerabilities for packages: seaweedfs-operator-fips, listmonk, hugo, rclone-fips, hugo-extended, seaweedfs-fips, ollama, mattermost-fips, mailpit, hugo-fips, ollama-fips, mailpit-fips, mattermost, seaweedfs, seaweedfs-operator, rclone...

GO-2024-2937 vulnerabilities

Vulnerabilities for packages: hugo, hugo-extended, gotenberg, ollama, chainctl...

GO-2023-1988 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, dive, prometheus-operator, tkn, prometheus-alertmanager, dynamic-localpv-provisioner, haproxy-ingress, frp, prometheus-adapter, metrics-server, nfs-subdir-external-provisioner, buildkitd, kiam, chartmuseum, gke-gcloud-auth-plugin,...

GO-2024-2901 vulnerabilities

Vulnerabilities for packages: ollama...

GO-2025-4251 vulnerabilities

Vulnerabilities for packages: k8sgpt, mods, ollama...

GO-2025-3824 vulnerabilities

Vulnerabilities for packages: k8sgpt, mods, ollama...

GO-2024-2937 vulnerabilities

Vulnerabilities for packages: ollama, hugo-extended, hugo...

GO-2026-4815 vulnerabilities

Vulnerabilities for packages: hugo, hugo-extended, mailpit, seaweedfs, ollama, rclone, mattermost...

GO-2026-4514 vulnerabilities

Vulnerabilities for packages: tempo, opentelemetry-collector, gitlab-runner, weaviate, redpanda, maru, loki, nuclei, nfpm, malcontent, grafana, mcp-grafana, lazygit, opentelemetry-collector-contrib, goreleaser, vcluster, grafana-alloy, dagger, teleport, k3s, k8sgpt, prometheus, ollama,...

GO-2026-5061 vulnerabilities

Vulnerabilities for packages: bento, kubescape, mailpit, seaweedfs, ollama, gitea, pdfcpu, mattermost, rclone...

GO-2026-4961 vulnerabilities

Vulnerabilities for packages: bento, kubescape, seaweedfs, ollama, gitea, pdfcpu, mattermost, rclone...

CVE-2026-19334

A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product ...

CVE-2026-19334

NightTrek Ollama-mcp is affected by a local command-injection in src/index.ts caused by manipulation of the argument name/model/file/source/destination. The issue exists up to the commit 80cf2e17cfc144963a475b619093a2d13c13dbc9, with no public version details due to rolling-release delivery. Expl...

CVE-2026-19334 NightTrek Ollama-mcp index.ts command injection

A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects an unknown part of the file src/index.ts. This manipulation of the argument name/modelfile/source/destination causes command injection. The attack can only be executed locally. This product ...