PT-2025-30449 · Ollama · Ollama

Geckosecurity · Published 2025-07-22 · Updated 2025-12-25 · CVE-2025-51471

Positive Technologies (AI Summary)

CVSS v3.1

6.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Ollama version 0.6.7

Description A cross-domain token exposure exists in the server.auth.getAuthorizationToken function. This allows remote attackers to steal authentication tokens and bypass access controls by exploiting a malicious realm value within a WWW-Authenticate header returned by the /api/pull endpoint.

Recommendations Update Ollama to a newer version that addresses this issue. As a temporary workaround, consider restricting access to the /api/pull endpoint.

Exploit

Fix

Insufficient Verification of Data Authenticity

Session Fixation

Weakness Enumeration

CWE-345

CWE-384

Related Identifiers

CVE-2025-51471

GHSA-X9HG-5Q6G-Q3JR

GO-2025-3824

OPENSUSE-SU-2025:15405-1

PYSEC-2025-147

Affected Products

Ollama

References · 76

• 🔥 https://github.com/ollama/ollama/pull/10750 · Exploit
• 🔥 https://gecko.security/blog/cve-2025-51471 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51471 · Security Note
• https://osv.dev/vulnerability/PYSEC-2025-147 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2025-3824 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15405-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-51471 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-x9hg-5q6g-q3jr · Vendor Advisory
• https://github.com/ollama/ollama · Note
• https://t.me/cveNotify/139223 · Telegram Post
• https://suse.com/security/cve/CVE-2025-5981 · Note
• https://suse.com/security/cve/CVE-2025-52901 · Note
• https://suse.com/security/cve/CVE-2025-52900 · Note
• https://suse.com/security/cve/CVE-2025-52889 · Note
• https://suse.com/security/cve/CVE-2025-53513 · Note