CVE-2024-37032

CVE-2024-37032 Path traversal en Ollama con servidor de registro malicioso Aprende de Probllama: Vulnerabilidad de ejecución remota de código en Ollama CVE-2024-37032 – Descripción general y mitigaciones Entorno de vulnerabilidad docker run -d -v ollama:/root/.ollama -p 11434:11434 --name ollama...

Exploit for Path Traversal in Ollama

CVE-2024-37032 Path traversal in Ollama with rogue registry se...

Ollama Model Registry Path Traversal RCE

Ollama before 0.1.34 is vulnerable to a path traversal attack via the model pull mechanism CVE-2024-37032. When pulling a model, the digest field in OCI manifests is not validated, allowing an attacker to inject path traversal sequences to write arbitrary files on the server. This module starts a...