Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Ollama

CVE-2025-51471: Ollama vulnerable to Cross-Domain Token Exposure

mediumCVSS 3.1 6.9GHSA-x9hg-5q6g-q3jr

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

Published Jul 22, 2025 · Updated Jun 6, 2026

Affected packages

github.com/ollama/ollama

Ecosystem
Go
Affected
<= 0.9.6
Fixed in
No patched version yet
Check
go list -m github.com/ollama/ollama

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Ollama vulnerabilities

All Ollama entries