Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Ollama

CVE-2025-1975: Ollama Server Vulnerable to Denial of Service (DoS) Attack

highCVSS 3.0 7.5GHSA-wrh5-cmwx-q2qr

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash.

Published May 16, 2025 · Updated Jun 6, 2026

Affected packages

github.com/ollama/ollama

Ecosystem
Go
Affected
<= 0.5.11
Fixed in
No patched version yet
Check
go list -m github.com/ollama/ollama

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the manifest content and spoofing a service. This is due to improper validation of array index access when downloading a model via the /api/pull endpoint, which can lead to a server crash.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Ollama vulnerabilities

All Ollama entries