We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.
Reserved 2025-06-16 | Published 2025-07-22 | Updated 2025-07-22 | Assigner mitregithub.com/ollama/ollama/pull/10750
www.gecko.security/blog/cve-2025-51471
Support options
