CVE-2024-28224 Ollama DNS rebinding vulnerability
An attacker can use DNS rebinding to access the API, allowing unauthorized model interaction, deletion, or resource exhaustion.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-28224?
CVE-2024-28224 is a medium-severity server-side request forgery vulnerability in n/a, published on 8 Apr 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).
Weakness: CWE-346
Which versions are affected by CVE-2024-28224?
3 open source packages ship an affected version, including github.com/ollama/ollama and github.com/jmorganca/ollama. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/ollama/ollama Go | All versions | 0.1.29 |
github.com/ollama/ollama Go | All versions | 0.1.29 |
github.com/jmorganca/ollama Go | All versions | 0.1.29 |
Products include Ollama Ollama.
How do I fix CVE-2024-28224?
Upgrade github.com/ollama/ollama to 0.1.29 or later.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2024-28224 being exploited?
There is no known exploitation of CVE-2024-28224 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2025-63389 Ollama Platform has missing authentication enabling attackers to perform model management operations
- CVE-2024-45436 Ollama can extract members of a ZIP archive outside of the parent directory
- CVE-2026-7482 Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
- CVE-2024-37032 Ollama does not validate the format of the digest (sha256 with 64 hex digits)
- CVE-2025-15514 Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
Sources
Also known as GHSA-5jx5-hqx5-2vrj, GO-2024-2699.