CVE-2026-5757

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.7% chance of exploitation in the next 30 days; higher than 54% of CVEs (scores of 2026-10-25)

CWE

CWE-125

Published

2026-06-26

Modified

2026-10-25

Record from

the NVD, synced 2026-10-25

Affected

• ollama:ollama

References

• https://kb.cert.org/vuls/id/518910
• https://ollama.com
• https://www.kb.cert.org/vuls/id/518910

Check your stackJSON