Ollama - Remote Code Execution

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring. id: CVE-2024-37032 info: name: Ollama ...

CLEANSTART-2026-WE49959 Security fixes in ollama 0.30.10-r0

Package ollama version 0.30.10-r0 fixes 6 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39821, CVE-2026-25680, CVE-2026-33813...

CLEANSTART-2026-RW73548 Security fixes in ollama-fips 0.21.0-r2

Package ollama-fips version 0.21.0-r2 fixes 7 vulnerabilities: CVE-2026-46595, CVE-2026-42508, CVE-2026-39834, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-AU44163 Security fixes in ollama 0.20.3-r2

Package ollama version 0.20.3-r2 fixes 13 vulnerabilities: CVE-2026-39827, CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831...

GHSA-3WP3-XXJ9-5JQQ Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Summary The getallmodels handlers in routers/openai.py and routers/ollama.py intended to cache their permission-filtered model lists per user, but the @cached decorator was misconfigured: it passed a key= lambda instead of keybuilder=. In aiocache 0.12.3 the pinned version, key= is a static cache...

CVE-2026-65315

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

CVE-2026-65315 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

CVE-2026-65315 Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

Ollama HEAD f0078ae contains an uncontrolled memory allocation vulnerability in the GGUF metadata parser that allows remote attackers to crash the server by supplying a crafted GGUF file with attacker-controlled length and count fields in string lengths, tensor dimension counts, and metadata arra...

CVE-2026-65315

Technical details about CVE-2026-65315 are not publicly available in the provided documents. Monitor for updates.

CLEANSTART-2026-QS59444 Security fixes for CVE-2026-42504 applied in versions: 0.20.7-r3

Security vulnerability affects the ollama-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QB14134 Security fixes for CVE-2026-25680, CVE-2026-33813, CVE-2026-39821, CVE-2026-42508, CVE-2026-46595, CVE-2026-46601 applied in versions: 0.30.10-r0

Multiple security vulnerabilities affect the ollama package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HQ88919 Security fixes for CVE-2026-25680, CVE-2026-39821, CVE-2026-42508, CVE-2026-46595, CVE-2026-46601, CVE-2026-46602 applied in versions: 0.23.4-r2

Multiple security vulnerabilities affect the ollama package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FU72483 Security fixes for CVE-2026-25680, CVE-2026-33813, CVE-2026-39821, CVE-2026-42508, CVE-2026-46595, CVE-2026-46601 applied in versions: 0.30.10-r0

Multiple security vulnerabilities affect the ollama package. These issues are resolved in later releases. See references for individual vulnerability details...

Improper Validation of Array Index

Overview Affected versions of this package are vulnerable to Improper Validation of Array Index via the downloadBlob function. An attacker can cause the application to access memory outside the bounds of an allocated array by sending specially crafted requests, resulting in a denial-of-service...

EUVD-2026-43562

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

PYSEC-2026-3450

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-15685

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-15685

CVE-2026-15685 affects Ollama, with the vulnerability located in the downloadBlob function where user-supplied data is not properly validated, allowing an out-of-bounds memory access and resulting in a denial-of-service condition. The issue, linked to ZDI-CAN-27277, can be triggered remotely with...

CVE-2026-15685

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...

CVE-2026-15685 Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability. The specific flaw exists...