CVE-2025-63389
Critical · 9.1Ollama Platform has missing authentication enabling attackers to perform model management operations
CVSS
9.1
EPSS
0.7%
Published
Dec 18, 2025
CISA due date
—
The record
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/ollama/ollama | 0 | No fix |
| Chainguard | ollama | 0 | 0.14.0-r0 |
| Chainguard | ollama-cpu | 0 | 0.13.5-r0 |
| Chainguard | ollama-fips | 0 | 0.13.5-r0 |
| Chainguard | ollama-fips | 0 | 0.14.0-r0 |
| Wolfi | ollama | 0 | 0.14.0-r0 |
| Wolfi | ollama-cpu | 0 | 0.13.5-r0 |
| openSUSE:Leap 15.6 | govulncheck-vulndb | 0 | 0.0.20260114T191543-150000.1.137.1 |
Related vulnerabilities
- CVE-2025-51471 Ollama vulnerable to Cross-Domain Token Exposure Also affects github.com/ollama/ollama
- CVE-2025-0317 Ollama Divide By Zero vulnerability Also affects github.com/ollama/ollama
- CVE-2024-37032 Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex… Also affects github.com/ollama/ollama
- CVE-2026-32285 The Delete function fails to properly validate offsets when processing malformed JSON… Also affects ollama
- CVE-2026-33809 A maliciously crafted TIFF file can cause image decoding to attempt to allocate up 4GiB… Also affects ollama
- CVE-2024-24792 Parsing a corrupt or malicious image with invalid color indices can cause a panic. Also affects ollama
- CVE-2026-33990 Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using… Also affects govulncheck-vulndb
- CVE-2026-34204 MinIO is a high-performance object storage system. Also affects govulncheck-vulndb