CWE-23

Vulnerability Analysis 8 Oct 2026

CVE-2026-103663: Ollama Path Traversal Vulnerability and RCE Risk Explained

Ollama is vulnerable to path traversal in the `/api/pull` endpoint due to insufficient validation of layer digests by the `digestToPath` function.

2 min read