CVE-2026-5757: Ollama: sınır dışı okuma

Açıklama (NVD)

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

Özet bilgiler

Ürün

Ollama Ollama

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

%0,74 (yüzdelik 55)

CWE

CWE-125

Yama

Yok / bilinmiyor

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• kb.cert.org
• ollama.com
• www.kb.cert.org
• CWE-125