Skip to content
Security Alerts

CVE-2026-7482: Heap out-of-bounds read in Ollama (GGUF loader)

Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in its GGUF model loader. A crafted GGUF file submitted to /api/create can leak server memory, including API keys and system prompts...

Summary

ParameterValue
CVE IDCVE-2026-7482
Alert SourceGitHub Advisory - Critical Vulnerability
CVE Publication Year2026
Date Published2026-05-04
VendorOllama
ProductOllama
CVSS Score9.1 (critical)
EPSS ScoreNo data
CISA KEVNo
RansomwareNot confirmed

Vulnerability Description

Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file’s actual length; during quantization in fs/ggml/gguf.go and server/quantization.go (WriteTo()), the server reads past the allocated heap buffer. The leaked memory contents may include environment variables, API keys, system prompts, and concurrent users’ conversation data, and can lead to disclosure of sensitive information and downstream compromise of systems that rely on those credentials.

Required Actions

Update Ollama to version 0.17.1 or later immediately. Until the patch is deployed, restrict access to the /api/create endpoint to trusted users via a reverse proxy with authentication. After upgrading, rotate all API keys and secrets used by the Ollama instance, as they may have been exposed. Review logs for requests to /api/create carrying unusual GGUF files.

Who Is Affected?

This vulnerability affects Ollama in versions prior to 0.17.1. Check whether your organization runs Ollama for LLM hosting and immediately update the installation and rotate secrets.

Sources


Need help securing your systems? nFlo team offers vulnerability management and 24/7 SOC services. Contact us.

Learn More

Share:

Talk to an expert

Have questions about this topic? Get in touch with our specialist.

Sales Representative
Grzegorz Gnych

Grzegorz Gnych

Sales Representative

Response within 24 hours
Free consultation
Individual approach

Providing your phone number will speed up contact.

Want to Reduce IT Risk and Costs?

Book a free consultation - we respond within 24h

Response in 24h Free quote No obligations

Or download free guide:

Download NIS2 Checklist