CVE-2025-63389: Ollama Platform has missing authentication enabling attackers to perform model management operations
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Published Dec 18, 2025 · Updated Dec 20, 2025
Affected packages
github.com/ollama/ollama
- Ecosystem
- Go
- Affected
- <= 0.13.5
- Fixed in
- No patched version yet
- Check
go list -m github.com/ollama/ollama
Advisory details
From the GitHub Advisory Database (CC BY 4.0).
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Ollama vulnerabilities
All Ollama entriesCVE-2026-7482
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
high9.1May 4, 2026CVE-2026-7020
Ollama is Vulnerable to Path Traversal
low5.6No fixApr 26, 2026CVE-2025-44779
Ollama allows deletion of arbitrary files
medium6.6Aug 7, 2025CVE-2025-51471
Ollama vulnerable to Cross-Domain Token Exposure
medium6.9No fixJul 22, 2025CVE-2025-1975
Ollama Server Vulnerable to Denial of Service (DoS) Attack
high7.5No fixMay 16, 2025CVE-2024-12055
Ollama Allows Out-of-Bounds Read
high7.5No fixMar 20, 2025