ollama security advisories
2 threat alerts tracking vulnerabilities and security advisories that affect ollama products.
Vulnios monitors ollama CVE feeds, vendor advisories, CISA KEV listings, and exploit-prediction data continuously. Each alert below is enriched with severity, exploitation status, affected products, and a remediation path. Use this page to scan recent ollama security news in one place, or click into an individual alert for full detail.
Critical Vulnerability: CVE-2025-63389 — ollama — ollama
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authe
criticalCVE-2025-63389Critical Vulnerability: CVE-2026-7482 — ollama — ollama
Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and
criticalCVE-2026-7482
Track ollama exposure across your environment
Vulnios automatically cross-references your asset inventory against new ollama CVEs and surfaces only what affects you. No more sifting manually — actionable findings only.
Start a free scan