https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:02:53.377710+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375000 EUVD-2026-375000 2026-10-02T11:02:53.412781+00:00 EUVD-2026-375000 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85180 fkie_cve-2026-85180 2026-10-02T11:02:53.412872+00:00

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal hosts including cloud metadata endpoints.

 https://cve.radiocsirt.org/vuln/ghsa-57p7-34ff-7w3w GHSA-57p7-34ff-7w3w 2026-10-02T11:02:53.412961+00:00

Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to redirect blob downloads to arbitrary hosts. An attacker can control a registry, serve a malicious tensor-layer manifest, and cause the server to issue GET requests to internal hosts including cloud metadata endpoints.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3181 WID-SEC-W-2026-3181 — Ollama: Schwachstelle ermöglicht Offenlegung von Informationen 2026-10-02T11:02:53.412980+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Ollama ausnutzen, um Informationen offenzulegen.