Ollama Tensor Model Transfer transfer.go digestToPath path traversal
cve-program · CVE-2026-7020
PublishedA security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Read the publisher's advisoryeuvd · EUVD-2026-25695
PublishedA security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Read the publisher's advisorynvd · CVE-2026-7020
PublishedA security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Read the publisher's advisoryosv · GHSA-x99g-8v8j-25j2
PublishedA security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Read the publisher's advisoryosv · GO-2026-5750
PublishedOllama is Vulnerable to Path Traversal in github.com/ollama/ollama
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-7020 · CVE overview and exploitation status
cve-program · CVE-2026-7020
euvd · EUVD-2026-25695
nvd · CVE-2026-7020
osv · GHSA-x99g-8v8j-25j2
- https://nvd.nist.gov/vuln/detail/CVE-2026-7020
- https://github.com/ollama/ollama
- https://vuldb.com/submit/797576
- https://vuldb.com/vuln/359599
- https://vuldb.com/vuln/359599/cti
osv · GO-2026-5750
Related changes
Linked by CVE identifierNo related changes are available here.