Ollama GGUF Model File RCE
Date: 2025-11
Affected: Ollama GGUF Model File RCE
Attack vector: rce
Category: real-world
Severity: Critical

Critical out-of-bounds write in Ollama < 0.7.0 when parsing malicious GGUF model files. Vulnerability in mllama C++ parsing code. Researchers demonstrated arbitrary memory bit-flipping via crafted metadata to overwrite function pointers and achieve RCE. An attacker with API access could load a malicious model to take over the server. Ollama rewrote the code in Go for v0.7.0.


Mitigations:

Architectural layers (MAESTRO):