Unauthenticated Remote Information Disclosure in Ollama's Model Quantization Engine

CVE-2026-5757

What is CVE-2026-5757?

An unauthenticated remote information disclosure vulnerability exists in Ollama's model quantization engine, enabling unauthorized attackers to access and exfiltrate sensitive data from the server's heap memory. This exposure can lead to further compromises and provide attackers with stealthy persistence options within the affected systems.

References