Ollama token exfiltration still present in latest release

1 point

5 months ago

I reproduced CVE-2025-51471 on the latest Ollama release and confirmed the issue is still present with the proposed fix unmerged.

Short demo video showing the token exfiltration flow: https://youtu.be/kC80FSrWbNk

Original disclosure (FuzzingLabs / Huntr): https://huntr.com/bounties/94eea285-fd65-4e01-a035-f533575ebdc2

Fix PR (still open at time of testing): https://github.com/ollama/ollama/pull/10750

1 comment