Skip to content

Instantly share code, notes, and snippets.

@Cristliu

Cristliu/CVE-2025-63389-Public.md

Created January 21, 2026 17:31
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save Cristliu/b6f4d070fb27932f581be1aadc0923e7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save Cristliu/b6f4d070fb27932f581be1aadc0923e7 to your computer and use it in GitHub Desktop.
Download ZIP
CVE-2025-63389 Public Disclosure
Raw
CVE-2025-63389-Public.md

Security Advisory: CVE-2025-63389 - Authentication Bypass in Ollama API

CVE ID: CVE-2025-63389 Date: 2025-12-18 Vendor: Ollama Product: Ollama Affected Versions: <= v0.12.3 Vulnerability Type: Incorrect Access Control / Authentication Bypass Severity: Critical (Code Execution, Privilege Escalation, Information Disclosure)

Summary

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

Impact

  • Code Execution: Potential for RCE via malicious model configuration or prompt injection.
  • Escalation of Privileges: Unauthorized management of models.
  • Information Disclosure: Enumeration of installed models.
  • Model Poisoning: Manipulation of model behavior via prompt injection.

References

Credits

Discovered by Zhihuang Liu (herecristliu@gmail.com).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment