9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-63389

CVE-2025-63389: Ollama Platform has missing authentication enabling attackers to perform model management operations

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-63389

CVE-2025-63389:

9.8

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
github.com/ollama/ollama	go	<= 0.13.5

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability lies in the absence of authentication on several API endpoints in the Ollama platform. The provided gist and vulnerability description clearly list the affected endpoints. The identified vulnerable functions are the handlers for these endpoints. An attacker can directly call these API endpoints to perform unauthorized actions such as creating, deleting, and modifying models. The root cause is the failure to implement any authentication or authorization checks on these sensitive API routes. The provided function names are based on common Go naming conventions and the listed API endpoints, as no patch or source code was directly available for analysis.

Vulnerable functions

github.com/ollama/ollama/server.TagsHandler

server/routes.go

This function handles the /api/tags endpoint, which allows listing of model tags without authentication. An attacker can use this to enumerate available models on the system.

github.com/ollama/ollama/server.CopyModelHandler

server/routes.go

This function handles the /api/copy endpoint, which allows copying a model without authentication. An attacker can use this to create copies of models, potentially with malicious modifications.

github.com/ollama/ollama/server.DeleteModelHandler

server/routes.go

This function handles the /api/delete endpoint, which allows deleting a model without authentication. An attacker can use this to disrupt service by deleting legitimate models.

github.com/ollama/ollama/server.CreateModelHandler

server/routes.go

This function handles the /api/create endpoint, which allows creating a new model without authentication. An attacker can use this to upload and create malicious models.

github.com/ollama/ollama/server.GenerateHandler

server/routes.go

This function handles the /api/generate endpoint, which allows generating text from a model without authentication. An attacker can use this to interact with models, potentially exploiting other vulnerabilities or extracting sensitive information.

github.com/ollama/ollama/server.ChatHandler

server/routes.go

This function handles the /api/chat endpoint, which allows chatting with a model without authentication. An attacker can use this to interact with models, potentially exploiting other vulnerabilities or extracting sensitive information.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.