CVE-2026-5757

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5757", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-04-07T16:59:20.290Z", "datePublished": "2026-06-26T15:15:28.464Z", "dateUpdated": "2026-06-26T18:38:23.503Z"}, "containers": {"cna": {"title": "There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "descriptions": [{"lang": "en", "value": "Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Ollama AI", "product": "Ollama", "versions": [{"status": "affected", "version": "v0.13.5"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}, {"descriptions": [{"lang": "en", "description": "CWE-416 Use After Free"}]}, {"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/518910"}, {"url": "https://ollama.com"}], "x_generator": {"engine": "VINCE 3.0.43", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5757"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-26T15:15:28.464Z"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/518910"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-26T15:52:23.093Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-26T18:37:59.802606Z", "id": "CVE-2026-5757", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:38:23.503Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/518910"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-26T15:52:23.093Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-5757", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T18:37:59.802606Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:38:18.655Z"}}], "cna": {"title": "There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Ollama AI", "product": "Ollama", "versions": [{"status": "affected", "version": "v0.13.5"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/518910"}, {"url": "https://ollama.com"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.43", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5757"}, "descriptions": [{"lang": "en", "value": "Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}, {"descriptions": [{"lang": "en", "description": "CWE-416 Use After Free"}]}, {"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-26T15:15:28.464Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5757", "state": "PUBLISHED", "dateUpdated": "2026-06-26T18:38:23.503Z", "dateReserved": "2026-04-07T16:59:20.290Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-06-26T15:15:28.464Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Ollama", "vendor": "Ollama AI", "versions": [{"status": "affected", "version": "v0.13.5"}]}], "source": "cret@cert.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*", "matchCriteriaId": "2D2FE797-DC0D-42D8-9CEA-18CD363B877A", "versionEndIncluding": "0.13.5", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence."}, {"lang": "es", "value": "Vulnerabilidad de revelaci\u00f3n de informaci\u00f3n remota no autenticada en el motor de cuantificaci\u00f3n de modelos de Ollama permite a un atacante leer y exfiltrar la memoria heap del servidor, lo que podr\u00eda llevar a la exposici\u00f3n de datos sensibles, compromiso adicional y persistencia sigilosa."}], "id": "CVE-2026-5757", "lastModified": "2026-10-25T17:10:00.197", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-5757", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-26T18:37:59.802606Z", "version": "2.0.3"}}]}, "published": "2026-06-26T16:16:36.917", "references": [{"source": "cret@cert.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://kb.cert.org/vuls/id/518910"}, {"source": "cret@cert.org", "tags": ["Product"], "url": "https://ollama.com"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://www.kb.cert.org/vuls/id/518910"}], "sourceIdentifier": "cret@cert.org", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-125"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "Ollama: There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "id": "2493588", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493588"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-822", "details": ["Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.", "A flaw was found in Ollama's model quantization engine. An unauthenticated remote attacker can exploit this vulnerability to read and exfiltrate the server's heap memory. This could lead to sensitive data exposure, further compromise of the system, and allow for stealthy persistence within the environment."], "mitigation": {"lang": "en:us", "value": "To mitigate this vulnerability, restrict network access to the Ollama service. Configure firewall rules to limit access to trusted networks or localhost only. If the Ollama service is running, a restart may be required for the changes to take effect."}, "name": "CVE-2026-5757", "package_state": [{"cpe": "cpe:/a:redhat:migration_toolkit_applications:8", "fix_state": "Not affected", "package_name": "mta/mta-solution-server-rhel9", "product_name": "Migration Toolkit for Applications 8"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-24/lightspeed-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-25/lightspeed-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:debezium:3", "fix_state": "Not affected", "package_name": "debezium-ai-embeddings-ollama", "product_name": "Red Hat build of Debezium 3"}, {"cpe": "cpe:/a:redhat:debezium:3", "fix_state": "Not affected", "package_name": "langchain4j-ollama", "product_name": "Red Hat build of Debezium 3"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2", "fix_state": "Not affected", "package_name": "rhtpa/rhtpa-trustification-service-rhel9", "product_name": "Red Hat Trusted Profile Analyzer"}], "public_date": "2026-06-26T15:15:28Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-5757\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5757\nhttps://kb.cert.org/vuls/id/518910\nhttps://ollama.com\nhttps://www.kb.cert.org/vuls/id/518910"], "statement": "This is an Important unauthenticated remote information disclosure vulnerability in the Ollama model quantization engine. An attacker can exploit this flaw to read and exfiltrate server heap memory, potentially exposing sensitive data and leading to further system compromise. This affects Red Hat products utilizing Ollama, such as Migration Toolkit for Applications, Red Hat OpenShift AI, and Red Hat Ansible Automation Platform, where the service may be exposed to untrusted networks.", "threat_severity": "Important"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "v0.13.5"}}], "enrichment": {"confidence": 90.0, "confidence_source": "matching", "scores": [{"score": 90.0, "source": "matching"}]}, "original": {"product": "Ollama", "source": "cna", "vendor": "Ollama AI"}, "product": "ollama", "vendor": "ollama"}], "created": "2026-06-26T17:45:03.937031+00:00", "updated": "2026-08-13T13:45:03.830068+00:00", "vendors": ["ollama", "ollama$PRODUCT$ollama"]}