AI agent vulnerability · Ollama

CVE-2024-12886: Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP

highCVSS 3.0 7.5GHSA-v464-r2r9-www7

An Out-Of-Memory (OOM) vulnerability exists in the ollama server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the ollama server crashing. The vulnerability is present in the makeRequestWithRetry and getAuthorizationToken functions, which use io.ReadAll to read the response body.

Published Mar 20, 2025 · Updated Oct 15, 2025

Affected packages

github.com/ollama/ollama

Ecosystem: Go
Affected: <= 0.3.14
Fixed in: No patched version yet
Check: go list -m github.com/ollama/ollama

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

An Out-Of-Memory (OOM) vulnerability exists in the ollama server version 0.3.14. This vulnerability can be triggered when a malicious API server responds with a gzip bomb HTTP response, leading to the ollama server crashing. The vulnerability is present in the makeRequestWithRetry and getAuthorizationToken functions, which use io.ReadAll to read the response body. This can result in excessive memory usage and a Denial of Service (DoS) condition.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Ollama vulnerabilities

All Ollama entries