VULNERABILITY INTELLIGENCE

CVE-2025-63389

CVSS score9.8 CRITICAL
EPSS probability0.71%
CISA KEVNot currently listed
Published2025-12-18
Last modified2026-10-13
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-306

Primary references