CVE-2026-5757
There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
High · published June 26, 2026
What it is
Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.
The record
Technical detail
- CVSS v3.1
- 7.5 · HIGH
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS v4.0
- Not supplied
- EPSS
- 0.00735 · 53.9th percentile
- Published
- 2026-06-26T15:15Z
EPSS history
Timeline