🚨 Critical Ollama Vulnerability: CVE-2026-103663

🚨 Critical Ollama Vulnerability: CVE-2026-103663

A critical security vulnerability has been disclosed in Ollama, the popular platform for running AI models locally and on private infrastructure.

The vulnerability allows unauthenticated attackers to exploit a path traversal weakness in the model-pull functionality, potentially writing malicious files outside the intended model directory.

Under specific deployment conditions, particularly affected Docker installations with writable executable paths, this could lead to remote code execution following a server restart.

Ollama versions 0.34.2 through 0.34.x are potentially affected. Organizations should upgrade to version 0.35.0 or later and restrict unnecessary access to the Ollama API.

SecPoint Penetrator continues expanding its vulnerability assessment capabilities to address emerging threats across AI infrastructure.

#SecPoint #Ollama #AISecurity #CyberSecurity #VulnerabilityManagement