[ Vendor · 2 CVEs ]
ollama
CVEs affecting ollama published in the last 30 days, plus any ollama CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-103663 | 8 Oct 2026 | CVSS 9.4 | OllamaOllama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function. An… | |
| CVE-2026-102697 | 29 Sep 2026 | CVSS 7.8 | ollamaOllama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerability in the experimental agent mode Bash tool approval mechanism… |