Ollama

3 known vulnerabilities in Ollama, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-102697 CVSS 8.5 high Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval…
  • CVE-2026-86289 CVSS 2.1 low A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the…
  • CVE-2026-85180 CVSS 8.7 high Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob…