Ce que montre l’historique
Le logiciel compte 27 CVE documentés avec un score CVSS maximal de 9.8 et 0 vulnérabilité exploitée connue. Sa dernière entrée CVE a été enregistrée le 2026-10-08.
Comment rester protégé
Les opérateurs doivent maintenir des branches de version prises en charge et suivre régulièrement les versions installées afin de garantir l'application rapide des correctifs de sécurité.
Branches de versions concernées
Vulnérabilités connues
| CVE | Titre | Versions concernées | CVSS | Exploitée | EPSS | Publication |
|---|---|---|---|---|---|---|
| CVE-2026-103663 | Path Traversal leading to Remote Code Execution in Ollama | ≥ 0.34.2 < 0.35.0 | 6.9 | — | 2026-10-08 | |
| CVE-2026-102697 | Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization | ≥ 0.14.0 < 0.31.2 | 8.5 | — | 2026-09-30 | |
| CVE-2026-85180 | Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect | ≥ 0.30.0 ≤ 0.33.2 | 8.7 | — | 2026-09-03 | |
| CVE-2026-65315 | Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser | ≤ f0078ae | 8.7 | — | 2026-07-22 | |
| CVE-2026-15685 | Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability | = 0.7.1 | 7.5 | — | 2026-07-13 | |
| CVE-2026-5757 | There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization eng... | ≤ 0.13.5 | 7.5 | — | 2026-06-26 | |
| CVE-2026-7482 | Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote at... | < 0.17.1 | 8.8 | — | 2026-05-04 | |
| CVE-2026-42249 | Remote Code Execution in Ollama via Update Mechanism | ≥ 0.12.10 ≤ 0.17.5 | 7.7 | — | 2026-04-29 | |
| CVE-2026-42248 | Missing Signature Verification for Updates in Ollama | ≥ 0.12.10 ≤ 0.17.5 | 7.7 | — | 2026-04-29 | |
| CVE-2026-7020 | Ollama Tensor Model Transfer transfer.go digestToPath path traversal | ≤ 0.20.2 * ≥ 0.20.0 ≤ 0.20.2 | 2.9 | — | 2026-04-26 | |
| CVE-2025-66960 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, fu... | * = 0.12.10 | 7.5 | — | 2026-01-21 | |
| CVE-2025-66959 | An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder | * = 0.12.10 | 7.5 | — | 2026-01-21 | |
| CVE-2025-15514 | Ollama Multi-Modal Model Image Processing NULL Pointer Dereference | ≥ v0.11.5-rc0 ≤ 0.13.5 ≥ 0.11.6 ≤ 0.13.5 = 0.11.5 | 8.7 | — | 2026-01-12 | |
| CVE-2025-63389 | A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to... | * ≤ 0.13.5 ≤ 0.12.3 | 9.8 | — | 2025-12-18 | |
| CVE-2025-44779 | An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endp... | * < 0.1.34 = 0.1.33 | 6.6 | — | 2025-08-07 | |
| CVE-2025-51471 | Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to st... | * ≤ 0.9.6 = 0.6.7 | 6.9 | — | 2025-07-22 | |
| CVE-2025-1975 | Improper Validation of Array Index in ollama/ollama | ≤ 0.5.11 * = 0.5.11 | 7.5 | — | 2025-05-16 | |
| CVE-2024-12886 | Out-Of-Memory (OOM) Vulnerability in ollama/ollama | ≤ 0.3.14 < 0.4.0-ci1 | 7.5 | — | 2025-03-20 | |
| CVE-2025-0312 | NULL Pointer Dereference in ollama/ollama | ≤ 0.3.14 * | 7.5 | — | 2025-03-20 | |
| CVE-2025-0315 | Allocation of Resources Without Limits or Throttling in ollama/ollama | ≤ 0.3.14 * | 7.5 | — | 2025-03-20 | |
| CVE-2025-0317 | Divide By Zero in ollama/ollama | ≤ 0.3.14 * | 7.5 | — | 2025-03-20 | |
| CVE-2024-8063 | Divide by Zero in ollama/ollama | ≤ 0.3.3 * = 0.3.3 | 7.5 | — | 2025-03-20 | |
| CVE-2024-12055 | DoS using malicious gguf model file in ollama/ollama | ≤ 0.3.14 * | 7.5 | — | 2025-03-20 | |
| CVE-2024-39722 | An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is dep... | < 0.1.46 | 7.5 | — | 2024-10-31 | |
| CVE-2024-39721 | An issue was discovered in Ollama before 0.1.34. The CreateModelHandler function uses os.Open to read a file u... | * < 0.1.34 | 7.5 | — | 2024-10-31 | |
| CVE-2024-39720 | An issue was discovered in Ollama before 0.1.46. An attacker can use two HTTP requests to upload a malformed G... | * < 0.1.46 | 8.2 | — | 2024-10-31 | |
| CVE-2024-39719 | An issue was discovered in Ollama through 0.3.14. File existence disclosure can occur via api/create. When cal... | ≤ 0.3.14 | 7.5 | — | 2024-10-31 | |
| CVE-2024-45436 | extractFromZipFile in model.go in Ollama before 0.1.47 can extract members of a ZIP archive outside of the par... | * < 0.1.47 | 7.5 | — | 2024-08-29 | |
| CVE-2024-37032 | Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the m... | * < 0.1.34 | 8.8 | — | 2024-05-31 | |
| CVE-2024-28224 | Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full... | * < 0.1.29 | 6.6 | — | 2024-04-08 |
Suivez ces versions sur vos propres serveurs
InfraGuard collecte les versions logicielles installées sur chaque serveur et signale celles qui présentent des vulnérabilités connues. Auto-hébergé : rien ne quitte votre réseau.
Données : CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (voir EPSS sur https://www.first.org/epss), endoflife.date. Liste des logiciels : awesome-selfhosted (CC BY-SA 3.0).