Known Vulnerabilities for products from Ollama
Listed below are 8 of the newest known vulnerabilities associated with the vendor "Ollama".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-110719 json | Not Provided | 2026-10-14 | 2026-10-20 | |
| CVE-2026-109296 json | Not Provided | 2026-10-12 | 2026-10-18 | |
| CVE-2026-108836 json | Not Provided | 2026-10-12 | 2026-10-13 | |
| CVE-2026-103663 json | Not Provided | 2026-10-08 | 2026-10-08 | |
| CVE-2026-102697 json | Not Provided | 2026-09-29 | 2026-09-29 | |
| CVE-2026-86289 json | Not Provided | 2026-09-07 | 2026-09-11 | |
| CVE-2026-85180 json | Not Provided | 2026-09-03 | 2026-09-03 | |
| CVE-2026-77294 json | Not Provided | 2026-09-24 | 2026-09-24 | |
| CVE-2026-61732 json | Not Provided | 2026-09-24 | 2026-09-24 | |
| CVE-2026-42249 json | Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attack... | Not Provided | 2026-04-29 | 2026-05-18 |
| CVE-2026-42248 json | Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other pla... | Not Provided | 2026-04-29 | 2026-05-18 |
| CVE-2026-19334 json | Not Provided | 2026-08-09 | 2026-08-10 | |
| CVE-2026-15685 json | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote atta... | Not Provided | 2026-07-13 | 2026-07-14 |
| CVE-2026-7482 json | Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint acce... | Not Provided | 2026-05-04 | 2026-05-11 |
| CVE-2026-7020 json | A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/tra... | Not Provided | 2026-04-26 | 2026-05-06 |
| CVE-2026-5757 json | Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read ... | Not Provided | 2026-06-26 | 2026-06-29 |
| CVE-2025-63389 json | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v... | Not Provided | 2025-12-18 | 2026-10-13 |
| CVE-2025-15514 json | Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal model im... | Not Provided | 2026-01-12 | 2026-08-17 |