CVE-2026-7020

LowCVSS 3.7/10Last modified Nov 11, 2026

Description

A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagegen/transfer/transfer.go of the component Tensor Model Transfer Handler. The manipulation of the argument digest results in path traversal. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is reported as difficult. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	Ollama	0.20.0; 0.20.1; 0.20.2

References

https://vuldb.com/submit/797576Exploit, Third Party Advisory, VDB Entry
https://vuldb.com/vuln/359599Third Party Advisory, VDB Entry
https://vuldb.com/vuln/359599/ctiPermissions Required
https://vuldb.com/submit/797576Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 26, 2026
Last modified: Nov 11, 2026
NVD status: Modified

Related CVEs from 2026

CVE-2026-702009.8Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevat CVE-2026-702015.5Out-of-bounds read in Windows DHCP Server allows an authorized attacker to deny service locally.CVE-2026-702027.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.CVE-2026-702038.8Heap-based buffer overflow in Windows Media Player allows an unauthorized attacker to execute code over a network.CVE-2026-702057.0Access of resource using incompatible type ('type confusion') in Windows Ancillary Function Driver for WinSock allows an authorized attacker CVE-2026-702066.5Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.CVE-2026-702077.5Heap-based buffer overflow in Network Policy Server (NPS) allows an authorized attacker to execute code over a network.CVE-2026-702085.5Out-of-bounds read in Windows HTTP.sys allows an authorized attacker to disclose information locally.CVE-2026-702097.0Use after free in Windows Win32 Kernel Subsystem allows an authorized attacker to elevate privileges locally.CVE-2026-70213.5A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/src/LLM/utils.ts of th CVE-2026-702108.8Heap-based buffer overflow in Windows OLE DB allows an unauthorized attacker to elevate privileges over a network.CVE-2026-702115.5Out-of-bounds read in Windows Win32 Kernel Subsystem allows an authorized attacker to disclose information locally.