Ollama

AI Threat Alert tracks 19 known AI/ML vulnerabilities affecting Ollama products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Ollama CVE below, sorted by severity and recency.

Data sources

Total CVEs

Pages

Page 1 of 1

Current

Severity	CVE	Headline	Package	CVSS
MEDIUM	CVE-2024-28224	Ollama: DNS rebinding exposes LLM API to remote access	ollama	6.6
HIGH	CVE-2024-37032	Ollama: path traversal enables RCE via model blob API	ollama	8.8
HIGH	CVE-2024-45436	Ollama: ZIP path traversal exposes host filesystem	ollama	7.5
HIGH	CVE-2024-39719	Ollama: file existence oracle via api/create errors	ollama	7.5
HIGH	CVE-2024-39720	Ollama: OOB read in GGUF parser enables remote DoS	ollama	8.2
HIGH	CVE-2024-39721	Ollama: DoS via /dev/random causes goroutine exhaustion	ollama	7.5
HIGH	CVE-2024-39722	Ollama: path traversal exposes server filesystem	ollama	7.5
HIGH	CVE-2024-12055	Ollama: DoS via malicious gguf model file upload	ollama	7.5
HIGH	CVE-2024-8063	ollama: divide-by-zero DoS via crafted GGUF model import	ollama	7.5
HIGH	CVE-2025-0312	Ollama: null pointer DoS via malicious GGUF model upload	ollama	7.5
HIGH	CVE-2025-0315	Ollama: GGUF model upload causes memory exhaustion DoS	ollama	7.5
HIGH	CVE-2025-0317	Ollama: DoS via malicious GGUF model file upload	ollama	7.5
UNKNOWN	CVE-2025-1975	Ollama: DoS via malicious manifest in /api/pull	ollama	-
MEDIUM	CVE-2025-51471	Ollama: auth token hijack via crafted WWW-Authenticate	ollama	6.9
MEDIUM	CVE-2025-44779	Ollama: arbitrary file deletion via /api/pull	ollama	6.6
CRITICAL	CVE-2025-63389	ollama: Missing Auth allows unauthenticated access	ollama	9.8
HIGH	CVE-2025-15514	ollama: security flaw enables exploitation	ollama	7.5
HIGH	CVE-2025-66959	ollama: Input Validation flaw enables exploitation	ollama	7.5
HIGH	CVE-2025-66960	ollama: Input Validation flaw enables exploitation	ollama	7.5

Frequently asked questions

How many known vulnerabilities affect Ollama?

19 AI/ML CVEs affecting Ollama products are tracked, sourced from NVD and GitHub Advisory.

What Ollama products are affected?

The CVEs below map to the Ollama AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.

Where does the Ollama vulnerability data come from?

Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.

How can I monitor Ollama for new vulnerabilities?

AI Threat Alert tracks Ollama continuously; a Pro subscription adds breaking alerts when new CVEs affecting Ollama are published.

How do I assess Ollama's security exposure?

Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Ollama issues first and judge the exposure for your stack.