CVE-2025-51471

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-51471
Cross-Domain Token Exposure in server.auth.getAuthorizationToken in Ollama 0.6.7 allows remote attackers to steal authentication tokens and bypass access controls via a malicious realm value in a WWW-Authenticate header returned by the /api/pull endpoint.

6.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/ollama/ollama Product
https://github.com/ollama/ollama/pull/10750 Exploit Issue Tracking
https://huntr.com/bounties/94eea285-fd65-4e01-a035-f533575ebdc2
https://www.gecko.security/blog/cve-2025-51471 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ollama:ollama:0.6.7:-:*:*:*:*:*:*
History

17 Oct 2025, 18:15

Type Values Removed Values Added
References
  • () https://huntr.com/bounties/94eea285-fd65-4e01-a035-f533575ebdc2 -

09 Oct 2025, 16:12

Type Values Removed Values Added
References () https://github.com/ollama/ollama - () https://github.com/ollama/ollama - Product
References () https://github.com/ollama/ollama/pull/10750 - () https://github.com/ollama/ollama/pull/10750 - Exploit, Issue Tracking
References () https://www.gecko.security/blog/cve-2025-51471 - () https://www.gecko.security/blog/cve-2025-51471 - Exploit, Third Party Advisory
First Time Ollama ollama
Ollama
CPE cpe:2.3:a:ollama:ollama:0.6.7:-:*:*:*:*:*:*

25 Jul 2025, 15:29

Type Values Removed Values Added
Summary
  • (es) La exposición de token entre dominios en server.auth.getAuthorizationToken en Ollama 0.6.7 permite a atacantes remotos robar tokens de autenticación y eludir los controles de acceso a través de un valor de reino malicioso en un encabezado WWW-Authenticate devuelto por el endpoint /api/pull.

22 Jul 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-22 19:15

Updated : 2025-10-17 18:15

NVD link : CVE-2025-51471

Mitre link : CVE-2025-51471

CVE.ORG link : CVE-2025-51471

JSON object : View

Products Affected

ollama

  • ollama
CWE
CWE-345

Insufficient Verification of Data Authenticity

CWE-384

Session Fixation