Ollama vulnerabilities and CVEs
The Beam CVE database tracks 16 security advisories for Ollama: 1 critical, 11 high, 3 medium and 1 low severity. The newest is CVE-2026-7482, published May 4, 2026 and fixed in 0.17.1.
A local model runner with an HTTP API, often exposed on developer machines and servers.
Check your version: go list -m github.com/ollama/ollama
- Vulnerabilities tracked
- 16
- Critical
- 1
- Known exploited (CISA KEV)
- 0
- Published in the last 30 days
- 0
All entries, newest first
CVE-2026-7482
Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader
high9.1May 4, 2026CVE-2026-7020
Ollama is Vulnerable to Path Traversal
low5.6No fixApr 26, 2026CVE-2025-63389
Ollama Platform has missing authentication enabling attackers to perform model management operations
critical9.3No fixDec 18, 2025CVE-2025-44779
Ollama allows deletion of arbitrary files
medium6.6Aug 7, 2025CVE-2025-51471
Ollama vulnerable to Cross-Domain Token Exposure
medium6.9No fixJul 22, 2025CVE-2025-1975
Ollama Server Vulnerable to Denial of Service (DoS) Attack
high7.5No fixMay 16, 2025CVE-2024-12055
Ollama Allows Out-of-Bounds Read
high7.5No fixMar 20, 2025CVE-2024-12886
Ollama Vulnerable to Denial of Service (DoS) via Crafted GZIP
high7.5No fixMar 20, 2025CVE-2024-8063
Ollama Divide by Zero Vulnerability
high7.5No fixMar 20, 2025CVE-2025-0312
Ollama Denial of Service (DoS) via Null Pointer Dereference
high7.5No fixMar 20, 2025CVE-2025-0315
Ollama Allocation of Resources Without Limits or Throttling vulnerability
high7.5No fixMar 20, 2025CVE-2025-0317
Ollama Divide By Zero vulnerability
high7.5No fixMar 20, 2025CVE-2024-39720
Ollama Out-of-bounds Read
high8.2Oct 31, 2024CVE-2024-45436
Ollama can extract members of a ZIP archive outside of the parent directory
high7.5Aug 29, 2024CVE-2024-37032
Ollama does not validate the format of the digest (sha256 with 64 hex digits)
mediumMay 31, 2024CVE-2024-28224
Ollama DNS rebinding vulnerability
high8.8Apr 8, 2024