Ollama Platform has missing authentication enabling attackers to perform model management operations

GHSA-f6mr-38g8-39rg · CVE-2025-63389 · GO-2025-4251 · 갱신 2026. 9. 10.

해야 할 일

아직 수정 버전이 없습니다. 원문의 우회 방법을 확인하고 노출 범위를 줄이세요.

영향 받는 패키지

생태계	패키지	수정 버전
Go	github.com/ollama/ollama	없음

원문

Ollama Platform has missing authentication enabling attackers to perform model management operations

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

출처

오늘 목록으로

Ollama Platform has missing authentication enabling attackers to perform model management operations (GHSA-f6mr-38g8-39rg) · Sieve