CVE-2026-5757 — There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine

CVE-2026-5757

There exists an unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine PUBLISHED

Description (CNA)

Unauthenticated remote information disclosure vulnerability in Ollama's model quantization engine allows an attacker to read and exfiltrate the server's heap memory, potentially leading to sensitive data exposure, further compromise, and stealthy persistence.

Affected (CNA)

Vendor / product	Versions
Ollama AI / Ollama	affected v0.13.5

CWE

No CWE identifiers supplied.

References

https://kb.cert.org/vuls/id/518910
https://ollama.com

ADP enrichment

CVE

No English description supplied.

https://www.kb.cert.org/vuls/id/518910

CISA-ADP

No English description supplied.

No references supplied.