CVE-2024-39719

Ollama versions 0.3.14 and earlier are vulnerable to a file existence disclosure vulnerability via the /api/create endpoint. The root cause is that the CreateModel route reflects specific error messages, such as "File does not exist," when an attacker provides a non-existent path parameter. This ...