Loading...
Skip to main content
GeekWala

CVE-2025-63389 — Vulnerability in github.com/ollama/ollama — CVE...

CRITICAL

Ollama Platform has missing authentication enabling attackers to perform model management operations

Published December 18, 2025Updated September 10, 2026Source: osv

Summary

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

Advisory Timeline

  • First published December 18, 2025 (298 days ago).
  • Last revised September 10, 2026 — 265 days after initial publication.

Affected Packages (1)

Affects 1 ecosystem: go (1).

PackageEcosystemAffectedFixed In
github.com/ollama/ollama
go
All versionsRange-based data available

Vulnerability Classification

Common Weakness Enumeration (CWE) identifiers for this vulnerability type.

CVSS Score Breakdown

What the CVSS (Common Vulnerability Scoring System) 9.1 score means for each attack dimension.

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
—
Confidentiality
—
Integrity
—
Availability
—

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N

References

Frequently Asked Questions

What is CVE-2025-63389?
Ollama Platform has missing authentication enabling attackers to perform model management operations This vulnerability has been assigned a severity rating of CRITICAL (CVSS score: 9.1/10).
How do I check if my project is affected by CVE-2025-63389?
CVE-2025-63389 affects github.com/ollama/ollama. Use GeekWala's free vulnerability scanner to check your dependencies against CVE-2025-63389 and 200,000+ other known vulnerabilities.

Severity & Exploitability

CVSS Score
9.1

Exploitation is straightforward and causes maximum impact. Patch immediately.

Also Known As

GHSA-f6mr-38g8-39rg
GO-2025-4251

Related CVEs

  • CVE-2026-107806
    CRITICAL

    Nginx UI: Authenticated Remote Code Execution via Backup Restore App Config Overwrite

  • CVE-2026-68582
    CRITICAL

    Vikunja: Link-share token reads any tenant's kanban buckets and enumerates usernames/IDs instance-wide (BOLA)

  • CVE-2026-7482
    HIGH

    Ollama contains a heap out-of-bounds read vulnerability in the GGUF model loader

More Go Modules advisories

Check if you're affected

Scan your dependencies to see if this vulnerability affects your projects.

Scan Your Dependencies