AI and data stack advisories

Severe, 6 weeks1498Projects326

1498 severe, 6 weeks · 326 projects

OllamaGHSA-x9hg-5q6g-q3jr

Ollama vulnerable to Cross-Domain Token Exposure

Ollama

CVE-2025-51471 · Published Jul 22, 2025 · updated Sep 10, 2026

Medium6.9
No fix yet
GitHub advisory

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

Affected versions

PackageAffectedFixed in
github.com/ollama/ollama
Go
<= 0.9.6No fix yet
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N
Severity from
GitHub (reviewed advisory)
Weakness
CWE-345
Also known as
CVE-2025-51471, GO-2025-3824

More Ollama advisories

All Ollama
Medium 6.6Aug 7, 2025Ollama allows deletion of arbitrary filesCVE-2025-44779fixed in 0.1.34High 7.5May 16, 2025Ollama Server Vulnerable to Denial of Service (DoS) AttackCVE-2025-1975no fix yetHigh 7.5Mar 20, 2025Ollama Divide By Zero vulnerabilityCVE-2025-0317no fix yetHigh 7.5Mar 20, 2025Ollama Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2025-0315no fix yetHigh 7.5Mar 20, 2025Ollama Denial of Service (DoS) via Null Pointer DereferenceCVE-2025-0312no fix yetHigh 7.5Mar 20, 2025Ollama Divide by Zero VulnerabilityCVE-2024-8063no fix yet