CVE-2025-51471

Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

CVSS v3.1 CNA

6.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N

EPSS

13.92% chance of exploitation in the next 30 days, 96th percentile

Published

2025-07-22

Updated

2025-10-17

Proof-of-concept exploits (3)

• ollama/ollama/pull/10750183394★ · 2026-10-16
• https://www.gecko.security/blog/cve-2025-51471
• ajtazer/CVE-2025-51471-POC2★ · 2025-12-24

Security advisories

• advisories/GHSA-x9hg-5q6g-q3jr

References

• CVE Record
• NVD entry

Related

• CVE-2026-86289