Ollama vulnerabilities
16 published CVEs name Ollama among the affected products.
- 16Published CVEs16 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical15 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103663
Path Traversal leading to Remote Code Execution in Ollama
Ollama · Ollama
Medium6.9 - CVE-2026-102697
Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
ollama · ollama
High8.5 - CVE-2026-85180
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
ollama · ollama
High8.7 - CVE-2026-65315
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
Ollama · Ollama
High8.7 - CVE-2026-15685
Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability
Ollama · Ollama
High7.5 - CVE-2026-7482
Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
ollama · ollama
High8.8 - CVE-2026-42249
Remote Code Execution in Ollama via Update Mechanism
Ollama · Ollama
High7.7 - CVE-2026-42248
Missing Signature Verification for Updates in Ollama
Ollama · Ollama
High7.7 - CVE-2025-15514
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
Ollama · Ollama
High8.7 - CVE-2025-1975
Improper Validation of Array Index in ollama/ollama
ollama · ollama/ollama
High7.5