Executive brief
Ollama allows deletion of arbitrary files in github.com/ollama/ollama
Affected products
- Go github.com/ollama/ollama
- PyPI ollama
Junglewise Threat Intelligence
CVE-2025-44779: GO-2025-3851 - Ollama allows deletion of arbitrary files in github.com/ollama/ollama
CVE-2025-44779 · Severity: low · CVSS 3.1 · Published 2025-08-11
Technologies: github.com/ollama/ollama (Go), ollama (PyPI). Vendors: Go, PyPI.
Related threats
- GO-2026-5750 - Ollama is Vulnerable to Path Traversal in github.com/ollama/ollama
- Ollama downloadBlob improper validation of array index denial of service
- Ollama heap out-of-bounds read in GGUF model loader
- PYSEC-2026-102 - An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads
- PYSEC-2026-101 - An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the GGUF decoder