CVE-2024-39719

CVE-2024-39719 affects Ollama up to version 0.3.14. The vulnerability arises in the /api/create CreateModel path handling, where querying a non-existent path triggers server error messages that disclose file existence, enabling an attacker to probe for files on the server. Public documentation ac...