Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*

3 briefs RSS
high advisory

Ollama SSRF Vulnerability (CVE-2026-108836)

Ollama versions up to 0.34.1 contain a Server-Side Request Forgery (SSRF) vulnerability in the Pull API component allowing remote attackers to perform unauthorized internal requests.

Ollama ssrf vulnerability
1c
high advisory

Remote Code Execution Vulnerability in Ollama

A vulnerability in Ollama (CVE-2024-37032) allows a remote, unauthenticated attacker to execute arbitrary code via insufficiently validated API requests.

Ollama remote-code-execution vulnerability cve-2024-37032
1c
high advisory

Ollama Arbitrary Redirect Vulnerability (CVE-2026-85180)

Ollama versions fail to validate redirect destinations during model pulls, allowing unauthenticated attackers to perform Server-Side Request Forgery (SSRF) against internal resources and cloud metadata services.

Ollama vulnerability ssrf cloud-security
1t 1c