{"data":{"id":"26453149-2351-4b06-86c8-4db2f8b9a629","title":"CVE-2026-7020: A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file…","summary":"A path traversal flaw has been reported in Ollama up to 0.20.2, in the digestToPath function of x/imagegen/transfer/transfer.go within the Tensor Model Transfer Handler component. Manipulating the digest argument enables the traversal, and the attack can be launched remotely but has high complexity and is reported as difficult to exploit. A public exploit exists, and the vendor did not respond to early disclosure.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-7020","publishedAt":"2026-04-26T05:16:02.023Z","cveId":"CVE-2026-7020","cweIds":["CWE-22"],"cvssScore":"5.6","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":["github.com/ollama/ollama@<= 0.20.2"],"affectedPackageNames":["github.com/ollama/ollama"],"affectedPackageRefs":["go:github.com/ollama/ollama"],"affectedVendors":[],"affectedVendorsRaw":["Ollama"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Ollama path traversal in digest handling of Tensor Model Transfer","headlinePromptVersion":"h1","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","attackVector":"network","attackComplexity":"high","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0.00908,"epssCheckedAt":"2026-11-09T06:13:52.512Z","kevDateAdded":null,"advisoryAliases":["GHSA-x99g-8v8j-25j2"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:49:07.298Z","patchAvailable":null,"disclosureDate":"2026-04-26T05:16:02.023Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-126"],"crossRefCount":0,"attackSophistication":"advanced","impactType":["integrity","confidentiality"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}