O
Vendor security profile
ollama
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs8
Critical0
CISA KEV0
Public exploit2
Patch rate%50
Avg. CVSS7.7
12-month vulnerability rate
0
0
1
0
0
0
0
1
2
0
3
1
CVE KEV
CVE severity distribution
8toplam CVE
High6 (75%)
Medium2 (25%)
Patch and exploitation view
%50
Verified patch
%0
CISA KEV
%25
Public exploit
4Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.9
CVE-2026-103663
Path Traversal leading to Remote Code Execution in Ollama
O
Patch status unknownEPSS %1
8.5
CVE-2026-102697
Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization
O
Patch verifiedEPSS %0
8.7
CVE-2026-85180
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
O
Patch status unknownEPSS %0
8.7
CVE-2026-65315
Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser
O
Patch verifiedEPSS %1
7.5
CVE-2026-15685
Vulnerability in Ollama
O
Patch status unknownEPSS %1
7.5
CVE-2026-5757
Out-of-bounds read in Ollama
O
Patch status unknownEPSS %1
8.7
CVE-2025-15514
Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
O
Patch verifiedEPSS %1