Free AI Safety Workshop — in collaboration with explainx.aiSave your seat
AgentbeamBeta
AI agent vulnerability · Ollama

CVE-2026-7020: Ollama is Vulnerable to Path Traversal

lowCVSS 4.0 2.9 · 3.1 5.6GHSA-x99g-8v8j-25j2

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult.

Published Apr 26, 2026 · Updated May 5, 2026

Affected packages

github.com/ollama/ollama

Ecosystem
Go
Affected
<= 0.20.2
Fixed in
No patched version yet
Check
go list -m github.com/ollama/ollama

Advisory details

From the GitHub Advisory Database (CC BY 4.0).

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

References

How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology

More Ollama vulnerabilities

All Ollama entries