VDB
GO-2025-4251
GO-2025-4251
PUBLISHED
Ollama has missing authentication enabling attackers to perform model management operations in github.com/ollama/ollama
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | k8sgpt | 0, 0, 0 |
| wolfi | mods | 0, 0, 0 |
| chainguard | ollama-fips | 0, 0, 0 |
| chainguard | ollama | 0, 0, 0 |
| github.com | ollama/ollama | 0, 0, 0 |
| chainguard | k8sgpt | 0, 0, 0 |
| chainguard | mods | 0, 0, 0 |
| wolfi | ollama | 0, 0, 0 |
Timeline
- Jan 14, 2026 CVE Published
- Aug 7, 2026 CVE Updated