OllamaGHSA-f6mr-38g8-39rg
Ollama Platform has missing authentication enabling attackers to perform model management operations
CriticalCVE-2025-63389 · Published Dec 18, 2025 · updated Sep 10, 2026
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| github.com/ollama/ollama Go | <= 0.13.5 | No fix yet |
Details and references
More Ollama advisories
All Ollama| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| May 4 | Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader High9.1May 4 | High9.1 | 0.17.1 |
| Apr 26 | Ollama is Vulnerable to Path TraversalLow5.6Apr 26 | Low5.6 | No fix yet |
| Aug 72025 | Ollama allows deletion of arbitrary filesMedium6.6Aug 7, 2025 | Medium6.6 | 0.1.34 |
| Jul 222025 | Ollama vulnerable to Cross-Domain Token ExposureMedium6.9Jul 22, 2025 | Medium6.9 | No fix yet |
| May 162025 | Ollama Server Vulnerable to Denial of Service (DoS) AttackHigh7.5May 16, 2025 | High7.5 | No fix yet |
| Mar 202025 | Ollama Divide By Zero vulnerabilityHigh7.5Mar 20, 2025 | High7.5 | No fix yet |