<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: ollama</title><description>Every new CVE for ollama.</description><link>https://agentprime.io/</link><item><title>CVE-2026-108836: Ollama Pull API name.go IsValid server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-108836/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-108836/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Oct 2026 12:45:16 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-103663: Path Traversal leading to Remote Code Execution in Ollama</title><link>https://agentprime.io/advisories/CVE-2026-103663/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-103663/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 08 Oct 2026 13:19:04 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-102697: Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization</title><link>https://agentprime.io/advisories/CVE-2026-102697/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-102697/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 29 Sep 2026 16:46:08 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-86289: Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow</title><link>https://agentprime.io/advisories/CVE-2026-86289/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86289/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 07 Sep 2026 08:45:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-85180: Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect</title><link>https://agentprime.io/advisories/CVE-2026-85180/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-85180/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Sep 2026 14:12:19 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-65315: Ollama Remote Denial of Service via Attacker-Controlled Allocation in GGUF Metadata Parser</title><link>https://agentprime.io/advisories/CVE-2026-65315/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-65315/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 21 Jul 2026 21:18:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5757: There exists an unauthenticated remote information disclosure vulnerability in Ollama&apos;s model quantization engine</title><link>https://agentprime.io/advisories/CVE-2026-5757/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5757/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Jun 2026 15:15:28 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42249: Remote Code Execution in Ollama via Update Mechanism</title><link>https://agentprime.io/advisories/CVE-2026-42249/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42249/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Apr 2026 11:44:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-42248: Missing Signature Verification for Updates in Ollama</title><link>https://agentprime.io/advisories/CVE-2026-42248/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-42248/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 29 Apr 2026 11:44:33 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-5530: Ollama Model Pull API download.go server-side request forgery</title><link>https://agentprime.io/advisories/CVE-2026-5530/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-5530/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 05 Apr 2026 00:30:13 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-15514: Ollama Multi-Modal Model Image Processing NULL Pointer Dereference</title><link>https://agentprime.io/advisories/CVE-2025-15514/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-15514/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 12 Jan 2026 23:03:52 GMT</pubDate><category>CVE</category></item></channel></rss>