Topic

Cve 2026 103663

Coverage tagged cve 2026 103663.

Articles: 1
Desk: 1

Data graphic: Ollama /api/pull path traversal CVE-2026-103663 , unauthenticated and reaching root in typical Docker; CVSS 9.4 when /usr/lib/ollama is writable, 6.9 when not, fixed in 0.35.0, port 11434.

highAI Security Cve 2026 103663

Ollama Path Traversal Lets Remote Attackers Plant Files, and Reach Root in Docker Deployments (CVE-2026-103663)

Ollama's unauthenticated /api/pull path traversal (CVE-2026-103663) can plant a binary that runs as root on restart in Docker. Fixed in 0.35.0.

Oct 8 · 5 min