Ollama vulnerabilities

CVEs per yearBy the year they were published

1. 20257
2. 20269

Newest CVEs

• CVE-2026-103663

  Path Traversal leading to Remote Code Execution in Ollama

  Ollama · Ollama

  Medium6.9
• CVE-2026-102697

  Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

  ollama · ollama

  High8.5
• CVE-2026-85180

  Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect

  ollama · ollama

  High8.7
• CVE-2026-65315

  Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser

  Ollama · Ollama

  High8.7
• CVE-2026-15685

  Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability

  Ollama · Ollama

  High7.5
• CVE-2026-7482

  Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers

  ollama · ollama

  High8.8
• CVE-2026-42249

  Remote Code Execution in Ollama via Update Mechanism

  Ollama · Ollama

  High7.7
• CVE-2026-42248

  Missing Signature Verification for Updates in Ollama

  Ollama · Ollama

  High7.7
• CVE-2025-15514

  Ollama Multi-Modal Model Image Processing NULL Pointer Dereference

  Ollama · Ollama

  High8.7
• CVE-2025-1975

  Improper Validation of Array Index in ollama/ollama

  ollama · ollama/ollama

  High7.5