Low
osv
·
PYSEC-2025-146
PYSEC-2025-146
Published Aug 7, 2025
CVSS 3.1
An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull.
Affected AI Products
ollama