RITS

Tag: vulnerability

  • Bleeding Llama: Critical Unauthenticated Memory Leak Hits 300,000 Ollama Servers

    Bleeding Llama: Critical Unauthenticated Memory Leak Hits 300,000 Ollama Servers

    Cyera Research disclosed CVE-2026-7482 (“Bleeding Llama”) on May 5, 2026 — a critical, unauthenticated heap out-of-bounds read in Ollama, the popular framework for running LLMs locally. The flaw, scored CVSS 9.1 by the issuing CNA (Echo lists it as 9.3), lets an attacker exfiltrate sensitive data straight out of the server’s memory in just three […]