CVE-2024-28224

CVE Enrichment

CVSS: 6.6 MEDIUM
EPSS: 0.35%
EPSS Percentile: 27.91%
CISA KEV: Not listed

Description

Ollama before 0.1.29 has a DNS rebinding vulnerability that can inadvertently allow remote access to the full API, thereby letting an unauthorized user chat with a large language model, delete a model, or cause a denial of service (resource exhaustion).

Technical Details

CVSS Version: 3.1
CNA / NVD Source: [email protected]
Published: 09-Apr-2024 02:15
Last Modified: 17-Jun-2026 14:21
EPSS Date: 2026-10-22
CWE: CWE-346

CVSS Vector


            CVSS:3.1                            AV:L /
                            AC:L /
                            PR:L /
                            UI:N /
                            S:U /
                            C:L /
                            I:L /
                            A:H

Affected Products / Versions

ollama / ollama
Version / affected range: * · before (exclusive) 0.1.29
cpe:2.3:a:ollama:ollama:*:*:*:*:*:*:*:*

References

Last enrichment sync: 23-Oct-2026 20:46
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

Ollama shipped a fix in v0.1.29 on March 14, 2024, and NCC Group published the advisory as CVE-2024-28224 the following month. NemoClaw Flaw Could Let Malicious Webpages Poison Local Ollama Models

People (1)

MITRE ATT&CK (2)

Vendors (1)

Products (5)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.