Ollama < 0.17.1 - Information Disclosure

highseverity

9.1CVSS score

7.1%likelihood of exploitation, next 30 days

94%of all CVEs are less likely

Readycheck to confirm it

Ollama < 0.17.1 contains a heap out-of-bounds read caused by improper validation of tensor offset and size in GGUF model loader, letting remote attackers leak sensitive memory data via /api/create and /api/push endpoints, exploit requires no authentication.

Impact

Remote attackers can leak sensitive memory contents including environment variables, API keys, and user data, leading to information disclosure.

Fix

Update to version 0.17.1 or later.

How to confirm it

Send: GET {{BaseURL}}/
Positive when: status_code == 200 and contains(body, "Ollama is running") and len(body) < 64
Send: GET {{BaseURL}}/api/version
Positive when: status_code == 200 and contains(content_type, "application/json") and compare_versions(ollama_version, "< 0.17.1")

Run it with nuclei: nuclei -id CVE-2026-7482 -u <target>. This check is not marked as verified by its authors.

The full check

id: CVE-2026-7482

info:
  name: Ollama < 0.17.1 - Information Disclosure
  author: theamanrawat
  severity: high
  description: |
    Ollama < 0.17.1 contains a heap out-of-bounds read caused by improper validation of tensor offset and size in GGUF model loader, letting remote attackers leak sensitive memory data via /api/create and /api/push endpoints, exploit requires no authentication.
  impact: |
    Remote attackers can leak sensitive memory contents including environment variables, API keys, and user data, leading to information disclosure.
  remediation: |
    Update to version 0.17.1 or later.
  reference:
    - https://github.com/advisories/GHSA-x8qc-fggm-mpqg
    - https://github.com/ollama/ollama/commit/88d57d0483cca907e0b23a968c83627a20b21047
    - https://github.com/szybnev/CVE-2026-7482
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
    cvss-score: 9.1
    cve-id: CVE-2026-7482
    epss-score: 0.02241
    epss-percentile: 0.82982
    cwe-id: CWE-125
  metadata:
    max-request: 2
    verified: false
    vendor: ollama
    product: ollama
    shodan-query: 'port:11434 "Ollama is running"'
    fofa-query: 'body="Ollama is running" && port="11434"'
  tags: cve,cve2026,ollama,exposure,vuln,vkev,passive

flow: http(1) && http(2)

http:
  - method: GET
    path:
      - '{{BaseURL}}/'
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(body, "Ollama is running")'
          - 'len(body) < 64'
        condition: and
        internal: true

  - method: GET
    path:
      - '{{BaseURL}}/api/version'
    matchers:
      - type: dsl
        dsl:
          - 'status_code == 200'
          - 'contains(content_type, "application/json")'
          - 'compare_versions(ollama_version, "< 0.17.1")'
        condition: and

    extractors:
      - type: regex
        name: ollama_version
        group: 1
        regex:
          - '"version"\s*:\s*"([0-9]+\.[0-9]+\.[0-9]+)"'

References

Use this check only on systems you are authorised to test. Where the data comes from