CVE-2024-39722

7.5 highEPSS 4.0%

High (7.5) in ollama ollama. EPSS 4.0% chance of exploitation in the next 30 days.

An issue was discovered in Ollama before 0.1.46. It exposes which files exist on the server on which it is deployed via path traversal in the api/push route.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2024-10-31
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

ollama:ollama

References

https://www.oligo.security/blog/more-models-more-probllms

Check your stack JSON