AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

OllamaGHSA-f6mr-38g8-39rg

Ollama Platform has missing authentication enabling attackers to perform model management operations

Ollama

CVE-2025-63389 · Published Dec 18, 2025 · updated Sep 10, 2026

Critical
No fix yet
GitHub advisory

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

Affected versions

PackageAffectedFixed in
github.com/ollama/ollama
Go
<= 0.13.5No fix yet
Details and references
CVSS 4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-284, CWE-306
Also known as
CVE-2025-63389, GO-2025-4251

More Ollama advisories

All Ollama
High 9.1May 4Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loaderCVE-2026-7482fixed in 0.17.1Low 5.6Apr 26Ollama is Vulnerable to Path TraversalCVE-2026-7020no fix yetMedium 6.6Aug 7, 2025Ollama allows deletion of arbitrary filesCVE-2025-44779fixed in 0.1.34Medium 6.9Jul 22, 2025Ollama vulnerable to Cross-Domain Token ExposureCVE-2025-51471no fix yetHigh 7.5May 16, 2025Ollama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975no fix yetHigh 7.5Mar 20, 2025Ollama Divide By Zero vulnerabilityCVE-2025-0317no fix yet