CVE Tools
Track your stack

Ollama

10 CVEs tracked since 2024. Since Oct 2024, none of them reached CISA KEV.

Ollama CVEs per month

Oct 2024 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Ollama CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2024-1040
2024-114 or fewer
2024-123 or fewer
2025-014 or fewer
2025-023 or fewer
2025-0360
2025-044 or fewer
2025-054 or fewer
2025-064 or fewer
2025-075 or fewer
2025-084 or fewer
2025-094 or fewer
2025-104 or fewer
2025-114 or fewer
2025-125 or fewer
2026-015 or fewer
2026-025 or fewer
2026-037 or fewer
2026-046 or fewer
2026-057 or fewer
2026-067 or fewer
2026-077 or fewer
2026-088 or fewer
2026-099 or fewer
2026-108 or fewer

Products

The products that kept showing up in Ollama's monthly top three, with their CVEs summed over those months.

  1. Ollama92 months
  2. Ollama/ollama61 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Ollama.

  1. CVE-2026-103663Path Traversal leading to Remote Code Execution in Ollama—
  2. CVE-2026-102697Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization7.8
  3. CVE-2026-85180Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect7.5
  4. CVE-2026-65315Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser7.5
  5. CVE-2026-15685Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability7.5
  6. CVE-2026-5757There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine7.5
  7. CVE-2026-7482Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers9.1
  8. CVE-2026-42249Remote Code Execution in Ollama via Update Mechanism9.8
  9. CVE-2026-42248Missing Signature Verification for Updates in Ollama9.8
  10. CVE-2026-7020Ollama Tensor Model Transfer transfer.go digestToPath path traversal3.7
  11. CVE-2025-66960An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata7.5
  12. CVE-2025-66959An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder7.5
  13. CVE-2025-15514Ollama Multi-Modal Model Image Processing NULL Pointer Dereference7.5
  14. CVE-2025-63389A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring au...9.8
  15. CVE-2025-44779An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.6.6

The record

Peak rank
#155 in Mar 2025
Busiest month shown
Mar 2025, 6 CVEs
Months with a KEV entry
0 since Oct 2024
Monthly snapshots
2 since 2024
Ollama's full record, month by month