Copyright © 2012 Red Hat, Inc. All rights reserved. Important 2026-06-26T15:15:28 Ollama: Ollama: Information disclosure vulnerability in model quantization engine 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CWE-825

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

A flaw was found in Ollama's model quantization engine. An unauthenticated remote attacker can exploit this vulnerability to read and exfiltrate the server's heap memory. This could lead to sensitive data exposure, further compromise of the system, and allow for stealthy persistence within the environment.

An Important information disclosure flaw in Ollama's model quantization engine allows unauthenticated remote attackers to exfiltrate server heap memory, potentially leading to sensitive data exposure. This vulnerability is rated Important due to the potential for remote exploitation without authentication. To mitigate this vulnerability, restrict network access to the Ollama service. Configure firewall rules to limit access to trusted networks or localhost only. If the Ollama service is running, a restart may be required for the changes to take effect. Migration Toolkit for Applications 8 Not affected mta/mta-solution-server-rhel9 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-24/lightspeed-rhel8 Red Hat Ansible Automation Platform 2 Not affected ansible-automation-platform-25/lightspeed-rhel8 Red Hat build of Debezium 3 Not affected debezium-ai-embeddings-ollama Red Hat build of Debezium 3 Not affected langchain4j-ollama Red Hat OpenShift AI (RHOAI) Not affected rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 Red Hat Trusted Profile Analyzer Not affected rhtpa/rhtpa-trustification-service-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-5757 https://nvd.nist.gov/vuln/detail/CVE-2026-5757 https://kb.cert.org/vuls/id/518910 https://ollama.com https://www.kb.cert.org/vuls/id/518910