Ollama Critical Vulnerability — Upgrade Now

Update Ollama to 0.17.1 now. A critical heap vulnerability (CVE-2026-7482) leaks env vars, API keys, and chat data on exposed servers.

Today I have to give my old friend another stab, because Ollama has really stepped in it this time — a CVSS 9.1 high-severity vulnerability that security researchers at Cyera have named Bleeding Llama (CVE-2026-7482).

The story broke via a disclosure article on The Hacker News. Cyera researcher Dor Attias discovered a heap out-of-bounds read vulnerability in Ollama’s GGUF model loader.

According to the official description on cve.org:

❝
Ollama before 0.17.1 contains a heap out-of-bounds read vulnerability in the GGUF model loader. The /api/create endpoint accepts an attacker-supplied GGUF file in which the declared tensor offset and size exceed the file’s actual length.

The problematic code locations are clearly identified:

• fs/ggml/gguf.go

• The WriteTo() function in server/quantization.go