MediumVulnerability
CVE-2026-7020: Ollama path traversal in digest handling of Tensor Model Transfer
- Source
- NVD(opens in a new tab)
- Identifier
- CVE-2026-7020
- Published
- Record updated
- Affected
- github.com/ollama/ollama <= 0.20.2
- Fixed in
- No fixed version was stated when the source was last read.
- Known exploitation
- Not listed in the CISA Known Exploited Vulnerabilities catalog at the last check.
- EPSS
- 0.9%
Summary
A path traversal flaw has been reported in Ollama up to 0.20.2, in the digestToPath function of x/imagegen/transfer/transfer.go within the Tensor Model Transfer Handler component. Manipulating the digest argument enables the traversal, and the attack can be launched remotely but has high complexity and is reported as difficult to exploit. A public exploit exists, and the vendor did not respond to early disclosure.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- github.com/ollama/ollamaGoLLM dependency since 2023-07-08 · 2 tracked dependents
Topics
Related items
- MediumRecent AI agent experiments reveal a risky future of machine 'teamwork' inside corporationsSimilar attack · CNBC Technology
- MediumClaude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHubSimilar attack · The Hacker News
- MediumCVE-2026-118046: JS Help Desk plugin stored DOM-based cross-site scripting via jsticket_messageSimilar attack · NVD/CVE Database
- MediumARTEX abuse expands as cybercriminals target financial sectorSimilar attack · Microsoft Security Blog
- MediumCVE-2026-102610: fast-agent serve unauthenticated remote command execution via /mcp endpointSimilar attack · NVD/CVE Database