{"data":{"id":"7c30f7e7-86d6-4c9b-bad2-3fae2f8a3fee","title":"CVE-2026-85180: Ollama fails to validate redirect destinations when pulling tensor-layer models, allowing unauthenticated attackers to r","summary":"Ollama (an AI model management tool) doesn't properly check where it's being redirected to when downloading tensor-layer models (the numerical data that makes AI models work). This allows attackers to trick Ollama into downloading files from malicious servers or even requesting sensitive information from internal cloud systems that should be private.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-85180","publishedAt":"2026-09-03T15:17:39.250Z","cveId":"CVE-2026-85180","cweIds":["CWE-918"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["supply_chain"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":["Ollama"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","attackVector":"network","attackComplexity":"low","privilegesRequired":"none","userInteraction":"none","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-09-03T15:17:39.250Z","capecIds":["CAPEC-664"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"inference","llmSpecific":false,"classifierConfidence":0.92,"researchCategory":null,"atlasIds":["AML.T0010"]}}