CVE-2026-42249: Ollama for Windows remote code execution through update mechanism path traversal

Summary

CVE-2026-42249 affects Ollama for Windows. Its update mechanism passes values from attacker-controlled HTTP response headers directly to filepath.Join without validation, so ../ sequences let files be written outside the update staging directory, including the Windows Startup directory. Chained with CVE-2026-42248 (Missing Signature Verification for Updates), this yields automatic, persistent code execution without user awareness. Versions 0.12.10 to 0.17.5 were tested and confirmed vulnerable; other versions were not tested.

Mitigation

The source does not state a fix yet. Check the original advisory for updates.

Topics

• Inference infrastructure

Related items

• MediumAI broke the cybersecurity world. What’s next?Similar attack · The Verge (AI)
• InfoGem5-Shark: Smaug-based Heterogeneous Deep Learning Accelerator Security and Robustness Evaluation and Characterization FrameworkSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoCVE-2026-123357: GROBID command execution through crafted PDF filename in Linux conversionSimilar attack · NVD/CVE Database
• MediumShai-Hulud Descendant Surfaces in Malicious Ruby Gem That Steals Credentials and Poisons AI ToolsSimilar attack · Socket Blog
• MediumCPython flaw exposes AI inference servers to sandbox escape attacksSimilar attack · CSO Online