ZDI-CAN-27277 HIGH 7.5 Overdue May 28, 2025

Ollama

Ollama is an open-source platform for running large language models locally. This vulnerability has a high severity rating (7.5) and can be exploited remotely without authentication or user interaction, resulting in a denial of service condition that affects system availability. Security teams should monitor for patches after the September 25, 2025 vendor deadline and implement access controls on Ollama instances in the interim, as this flaw could allow attackers to disrupt AI model services without credentials.

Advisory Details
Researcher Discovered by: Nicholas Zubrisky (@NZubrisky) of Trend Research
Reported May 28, 2025
Deadline September 25, 2025 203d overdue
CVSS Vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy