CVE-2024-39719

Ollama versions 0.3.14 and earlier are vulnerable to a file existence disclosure vulnerability via the /api/create endpoint. The root cause is that the CreateModel route reflects specific error messages—such as "File does not exist" —when a provided path parameter is invalid. This allows an attac...