CVE-2025-63389 Ollama Platform has missing authentication enabling attackers to perform model management operations

What is CVE-2025-63389?

CVE-2025-63389 is a critical authentication bypass vulnerability in n/a, published on 18 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

Weakness: CWE-306

Which versions are affected by CVE-2025-63389?

3 open source packages ship an affected version, including github.com/ollama/ollama. It affects 1 product.

Products include Ollama Ollama.

How do I fix CVE-2025-63389?

Upgrade to a fixed version.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-63389 being exploited?

There is no known exploitation of CVE-2025-63389 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2024-45436 Ollama can extract members of a ZIP archive outside of the parent directory Critical 9.1
• CVE-2026-7482 Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers High 8.8
• CVE-2024-37032 Ollama does not validate the format of the digest (sha256 with 64 hex digits) High 8.8
• CVE-2025-15514 Ollama Multi-Modal Model Image Processing NULL Pointer Dereference High 8.7
• CVE-2024-39720 Ollama Out-of-bounds Read High 8.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CLEANSTART-2026-TR14013, GHSA-f6mr-38g8-39rg, GO-2025-4251, MINI-gwpm-gjp3-m584, MINI-wwpr-rv7m-7738.