Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2025/12/22 6:57 a.m.•16 views

CVE-2025-63389

A flaw was found in Ollama. This critical authentication bypass vulnerability allows remote attackers to perform unauthorized model management operations. The platform exposes multiple API endpoints without requiring authentication, enabling attackers to manipulate models without proper...

9.8CVSS6.5AI score0.00708EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2025/12/18 6:30 p.m.•47 views

Ollama Platform has missing authentication enabling attackers to perform model management operations

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...

9.8CVSS6.5AI score0.00708EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2025/12/18 12:00 a.m.•16 views

CVE-2025-63389

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...

9.8CVSS7.2AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/18 12:00 a.m.•2 views

CVE-2025-63389: Missing Authentication for Critical Function

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...

9.8CVSS5.7AI score0.00708EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/12/18 12:00 a.m.•66 views

CVE-2025-63389

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations...

0.00708EPSS
SaveExploits0References3
Rows per page
Query Builder