CVE-2026-5757

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

High · published June 26, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
53.9
In the wild
Unconfirmed
What it is

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00735 · 53.9th percentile
Published
2026-06-26T15:15Z
EPSS history
Timeline
  • 26 JUN 15:15Z
    There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine
    cvelistv5