Description
A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.
INFO
Published Date :
2025-12-18T00:00:00.000Z
Last Modified :
2025-12-19T18:02:03.129Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2025-63389 vulnerability.
| Vendors | Products |
|---|---|
| Ollama |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-63389.