O
Jul 16, 2026Ollama Model Loading RCE: Three Years of the Same Bug Class, One Self-Hosted LLM Runtime
From CVE-2024-37032 'Probllama' (Wiz, 2024 path traversal) to the Out-Of-Bounds Write in MLLAMA parsing (all versions before 0.7.0) to ZipSlip in server/model.go. Why Ollama keeps shipping RCEs at the model-load boundary, and what to do if you self-h
Jul 16, 20267 min read0 reactions0 comments