Ollama Platform has missing authentication enabling attackers to perform model management operations

Description

References

• nvd.nist.gov/vuln/detail/CVE-2025-63389 · ADVISORY
• gist.github.com/Cristliu/48dae561696374744d9fced07a544ecd · WEB
• ollama/ollama · PACKAGE
• ollama/ollama · WEB
• gist.github.com/Cristliu/b6f4d070fb27932f581be1aadc0923e7
• GitHub Advisory GHSA-f6mr-38g8-39rg · ADVISORY

Weitere Schwachstellen in github.com/ollama/ollama

• CVE-2026-7482KRITISCH 9.1Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker…
• CVE-2026-7020NIEDRIG 3.7A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.…
• CVE-2025-44779MITTEL 6.6An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.
• CVE-2025-51471MITTEL 6.9Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and …
• CVE-2025-1975HOCH 7.5A vulnerability in the Ollama server version 0.5.11 allows a malicious user to cause a Denial of Service (DoS) attack by customizing the man…