Ollama 0.14.0 before 0.31.2 Experimental Agent Bash Approval Bypass via Prefix-Based Authorization

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-102697 · Microsoft / collected KEV context

cve-program · CVE-2026-102697

• https://github.com/ollama/ollama/commit/a2b3a5e9a3956bc0700a8505580c11faf4da09b5
• https://github.com/ollama/ollama/releases/tag/v0.31.2
• https://github.com/ollama/ollama/blob/v0.31.1/x/agent/approval.go#L204-L206
• https://github.com/ollama/ollama/blob/v0.31.1/x/agent/approval.go#L389
• https://github.com/ollama/ollama
• https://www.vulncheck.com/advisories/ollama-0.14.0-before-0.31.2-experimental-agent-bash-approval-bypass-via-prefix-based-authorization

No related operational record is retained in the current change model.