CVE-2026-5757 There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
Unauthenticated attackers can read server heap memory via the model quantization engine, exposing sensitive data and enabling further compromise.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-5757?
CVE-2026-5757 is a high-severity vulnerability in Ollama, published on 26 Jun 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.
Weakness: CWE-125
Which versions are affected by CVE-2026-5757?
It affects 1 product.
Products include Ollama Ollama.
How do I fix CVE-2026-5757?
Upgrade to a fixed version.
Is CVE-2026-5757 being exploited?
There is no known exploitation of CVE-2026-5757 in the wild and no public exploit code.
Other vulnerabilities in Ollama
- CVE-2025-63389 Ollama Platform has missing authentication enabling attackers to perform model management operations
- CVE-2024-45436 Ollama can extract members of a ZIP archive outside of the parent directory
- CVE-2026-7482 Ollama heap out-of-bounds read in GGUF tensor parsing leaks server process memory to unauthenticated remote attackers
- CVE-2024-37032 Ollama does not validate the format of the digest (sha256 with 64 hex digits)
- CVE-2025-15514 Ollama Multi-Modal Model Image Processing NULL Pointer Dereference
Sources
Also known as GHSA-c839-jg98-xwx3, MINI-44wf-xxxm-4vvm.