ZDI-CAN-27277
HIGH 7.5
Overdue
May 28, 2025
Ollama
Ollama is an open-source platform for running large language models locally. This vulnerability has a high severity rating (7.5) and can be exploited remotely without authentication or user interaction, resulting in a denial of service condition that affects system availability. Security teams should monitor for patches after the September 25, 2025 vendor deadline and implement access controls on Ollama instances in the interim, as this flaw could allow attackers to disrupt AI model services without credentials.
Advisory Details
Researcher
Discovered by:
Nicholas Zubrisky (@NZubrisky) of Trend Research
Reported
May 28, 2025
Deadline
September 25, 2025
203d overdue
CVSS Vector
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H