{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-5757", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "state": "PUBLISHED", "assignerShortName": "certcc", "dateReserved": "2026-04-07T16:59:20.290Z", "datePublished": "2026-06-26T15:15:28.464Z", "dateUpdated": "2026-06-26T18:38:23.503Z"}, "containers": {"cna": {"title": "There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "descriptions": [{"lang": "en", "value": "Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence."}], "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Ollama AI", "product": "Ollama", "versions": [{"status": "affected", "version": "v0.13.5"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}, {"descriptions": [{"lang": "en", "description": "CWE-416 Use After Free"}]}, {"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/518910"}, {"url": "https://ollama.com"}], "x_generator": {"engine": "VINCE 3.0.43", "env": "prod", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5757"}, "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-26T15:15:28.464Z"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/518910"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-26T15:52:23.093Z"}}, {"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2026-06-26T18:37:59.802606Z", "id": "CVE-2026-5757", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:38:23.503Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.kb.cert.org/vuls/id/518910"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-06-26T15:52:23.093Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2026-5757", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-26T18:37:59.802606Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-26T18:38:18.655Z"}}], "cna": {"title": "There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Ollama AI", "product": "Ollama", "versions": [{"status": "affected", "version": "v0.13.5"}]}], "references": [{"url": "https://kb.cert.org/vuls/id/518910"}, {"url": "https://ollama.com"}], "x_generator": {"env": "prod", "engine": "VINCE 3.0.43", "origin": "https://cveawg.mitre.org/api/cve/CVE-2026-5757"}, "descriptions": [{"lang": "en", "value": "Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-125 Out-of-bounds Read"}]}, {"descriptions": [{"lang": "en", "description": "CWE-416 Use After Free"}]}, {"descriptions": [{"lang": "en", "description": "CWE-306 Missing Authentication for Critical Function"}]}], "providerMetadata": {"orgId": "37e5125f-f79b-445b-8fad-9564f167944b", "shortName": "certcc", "dateUpdated": "2026-06-26T15:15:28.464Z"}}}, "cveMetadata": {"cveId": "CVE-2026-5757", "state": "PUBLISHED", "dateUpdated": "2026-06-26T18:38:23.503Z", "dateReserved": "2026-04-07T16:59:20.290Z", "assignerOrgId": "37e5125f-f79b-445b-8fad-9564f167944b", "datePublished": "2026-06-26T15:15:28.464Z", "assignerShortName": "certcc"}, "dataVersion": "5.2"}

{}

{"bugzilla": {"description": "Ollama: There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine", "id": "2493588", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493588"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-822", "details": ["Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.", "A flaw was found in Ollama's model quantization engine. An unauthenticated remote attacker can exploit this vulnerability to read and exfiltrate the server's heap memory. This could lead to sensitive data exposure, further compromise of the system, and allow for stealthy persistence within the environment."], "mitigation": {"lang": "en:us", "value": "To mitigate this vulnerability, restrict network access to the Ollama service. Configure firewall rules to limit access to trusted networks or localhost only. If the Ollama service is running, a restart may be required for the changes to take effect."}, "name": "CVE-2026-5757", "package_state": [{"cpe": "cpe:/a:redhat:migration_toolkit_applications:8", "fix_state": "Not affected", "package_name": "mta/mta-solution-server-rhel9", "product_name": "Migration Toolkit for Applications 8"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-24/lightspeed-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:ansible_automation_platform:2", "fix_state": "Not affected", "package_name": "ansible-automation-platform-25/lightspeed-rhel8", "product_name": "Red Hat Ansible Automation Platform 2"}, {"cpe": "cpe:/a:redhat:debezium:3", "fix_state": "Not affected", "package_name": "debezium-ai-embeddings-ollama", "product_name": "Red Hat build of Debezium 3"}, {"cpe": "cpe:/a:redhat:debezium:3", "fix_state": "Not affected", "package_name": "langchain4j-ollama", "product_name": "Red Hat build of Debezium 3"}, {"cpe": "cpe:/a:redhat:openshift_ai", "fix_state": "Not affected", "package_name": "rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9", "product_name": "Red Hat OpenShift AI (RHOAI)"}, {"cpe": "cpe:/a:redhat:trusted_profile_analyzer:2", "fix_state": "Not affected", "package_name": "rhtpa/rhtpa-trustification-service-rhel9", "product_name": "Red Hat Trusted Profile Analyzer"}], "public_date": "2026-06-26T15:15:28Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-5757\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-5757\nhttps://kb.cert.org/vuls/id/518910\nhttps://ollama.com\nhttps://www.kb.cert.org/vuls/id/518910"], "statement": "This is an Important unauthenticated remote information disclosure vulnerability in the Ollama model quantization engine. An attacker can exploit this flaw to read and exfiltrate server heap memory, potentially exposing sensitive data and leading to further system compromise. This affects Red Hat products utilizing Ollama, such as Migration Toolkit for Applications, Red Hat OpenShift AI, and Red Hat Ansible Automation Platform, where the service may be exposed to untrusted networks.", "threat_severity": "Important"}