Security Flaw in Ollama Affecting Tensor Model Transfer Handler

CVE-2026-7020

What is CVE-2026-7020?

A vulnerability has been identified in the Tensor Model Transfer Handler of Ollama, specifically in the function digestToPath located in the transfer.go file. This flaw allows an attacker to manipulate the digest argument, resulting in a path traversal issue that could enable access to unauthorized directories on the file system. The complexity of the exploit is high, making it challenging to execute. Due to the nature of this security flaw, it poses significant risks, especially as the exploit has been publicly disclosed. The vendor, Ollama, was notified about this vulnerability prior to its public release but did not provide any official response.

References