Tools AI Risk Radar ai-incident-0186
Incident record
Ollama fixes model-file writes outside its storage directory
- Severity
- Critical
- Status
- Patched
- Type
- Infra Vuln
- Target
- Ollama from 0.34.2 to before 0.35.0
- Actor
- researcher
- CVE
- CVE-2026-103663
What happened
A crafted model-layer digest could write files outside Ollama’s model storage. With permission to write its library directory, an attacker could obtain root code execution at the next restart.
Version 0.35.0 fixes the vulnerability. CERT Polska gives CVSS 4.0 scores of 9.4 when library writes are possible and 6.9 otherwise; this row’s Critical rating uses the former scenario. The CVE credits Bartłomiej Dmitruk. Its publication record reports no known exploitation at that time.
Sources
- Primary disclosurecert.pl/en/posts/2026/10/CVE-2026-103663/
- Supporting primary sourcecveawg.mitre.org/api/cve/CVE-2026-103663
One record from the AI Risk Radar, maintained by the Security Desk.Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 13 October 2026