{"data":{"id":"09827463-7366-43b1-a1bb-b00af6bd707f","title":"CVE-2026-86289: A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/g","summary":"A vulnerability was discovered in Ollama software up to version 0.31.1 that allows an integer overflow (a situation where a number calculation exceeds the maximum value a program can store, causing it to wrap around) in the GGUF Decoder component (the part that reads model files). An attacker can remotely exploit this vulnerability, and the exploit code has been made public.","solution":"Upgrading to version 0.31.2-rc1 is capable of addressing this issue. The patch is named 67b6a1c2d45321e0cb3c04a18073f9818de7724b.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86289","publishedAt":"2026-09-07T09:17:17.470Z","cveId":"CVE-2026-86289","cweIds":["CWE-189","CWE-190"],"cvssScore":"4.3","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Ollama"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-07T09:17:17.470Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","availability"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}