Skip to content

CVE-2026-5757

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
April 22, 2026
Last Seen
April 24, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical Vulnerability in Ollama Allows Data Exfiltration via Model Uploads69.9

A severe vulnerability, tracked as CVE-2026-5757, has been identified in Ollama's model quantization engine, which enables unauthenticated attackers to exploit the model upload interface. By uploading a specially crafted GGUF file, attackers can read and exfiltrate sensitive heap memory from the ser...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Data BreachCWE-787 - Out-of-bounds WriteCWE-125 - Out-of-bounds ReadCWE-200 - Exposure of Sensitive InformationT1041 - Exfiltration Over C2 ChannelOllamaWindowsLinuxMacOS