PT-2026-35911 · Ollama · Ollama

Bartłomiej Dmitruk · Published 2026-04-29 · Updated 2026-05-11 · CVE-2026-42248

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ollama for Windows versions 0.12.10 through 0.17.5

Description Ollama for Windows fails to verify the integrity or authenticity of downloaded update executables. The update verification routine on Windows unconditionally returns success, bypassing digital signature and trust validation before update payloads are staged or executed. This allows attacker-supplied executables to be accepted and executed. Because the application performs silent automatic updates, malicious payloads can be installed without user awareness.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

CWE-494

Related Identifiers

BDU:2026-08026

BDU:2026-08027

CVE-2026-42248

Affected Products

Ollama

References · 12

• https://bdu.fstec.ru/vul/2026-08026 · Security Note
• https://bdu.fstec.ru/vul/2026-08027 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-42248 · Security Note
• https://twitter.com/Cel_Metal_/status/2053485803385307310 · Twitter Post
• https://ollama.com · Note
• https://twitter.com/DavidOndrej1/status/2053503907255537884 · Twitter Post
• https://twitter.com/CVEnew/status/2049594363928256666 · Twitter Post
• https://twitter.com/striga_ai/status/2049462200079716626 · Twitter Post
• https://twitter.com/striga_ai/status/2053763358927568902 · Twitter Post
• https://twitter.com/hackerman_70000/status/2053827015870988736 · Twitter Post
• https://cert.pl/en/posts/2026/04/CVE-2026-42248 · Note
• https://twitter.com/AISGateway/status/2053953824847798539 · Twitter Post