CVE-2024-37032

CVE-2024-37032 Path traversal in Ollama with rogue registry server Learn from Probllama: Ollama Remote Code Execution Vulnerability CVE-2024-37032 – Overview and Mitigations Vulnerability environment docker run -d -v ollama:/root/.ollama -p 11434:11434 --name ollama ollama/ollama:0.1.33 Rogue...

Exploit for Path Traversal in Ollama

CVE-2024-37032 Path traversal in Ollama with rogue registry se...

Ollama Model Registry Path Traversal RCE

Ollama before 0.1.34 is vulnerable to a path traversal attack via the model pull mechanism CVE-2024-37032. When pulling a model, the digest field in OCI manifests is not validated, allowing an attacker to inject path traversal sequences to write arbitrary files on the server. This module starts a...