r/LocalLLaMA
·
19h ago
·
8
·
open source
security
inference
Critical vulnerability (CVE-2026-7482, CVSS 9.1) discovered in Ollama enabling unauthenticated memory leaks from the Ollama process, potentially exposing user prompts, system prompts, and environment variables across 300,000+ servers. The article provides technical details on Ollama's API architecture and how the vulnerability works through the /api/create and /api/blobs endpoints.