CVE-2024-37032

Ollama before 0.1.34 does not validate the format of the digest (sha256 with 64 hex digits) when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring.

• CWE-22

• https://github.com/ollama/ollama/blob/adeb40eaf29039b8964425f69a9315f9f1694ba8/server/modelpath_test.go#L41-L58Product
• https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34Release Notes
• https://github.com/ollama/ollama/pull/4175Issue Tracking
• https://www.vicarius.io/vsociety/posts/probllama-in-ollama-a-tale-of-a-yet-another-rce-vulnerability-cve-2024-37032Exploit, Third Party Advisory
• https://github.com/ollama/ollama/blob/adeb40eaf29039b8964425f69a9315f9f1694ba8/server/modelpath_test.go#L41-L58Product
• https://github.com/ollama/ollama/compare/v0.1.33...v0.1.34Release Notes
• https://github.com/ollama/ollama/pull/4175Issue Tracking
• https://www.vicarius.io/vsociety/posts/probllama-in-ollama-a-tale-of-a-yet-another-rce-vulnerability-cve-2024-37032Exploit, Third Party Advisory

Published

May 31, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-37027Improper Input validation in some Intel(R) VTune(TM) Profile…6.1
• CVE-2024-37028BIG-IP Next Central Manager may allow an attacker to lock ou…5.3
• CVE-2024-37029Fuji Electric Tellus Lite V-Simulator is vulnerable to a st…7.8
• CVE-2024-3703The Carousel Slider WordPress plugin before 2.2.10 does not …4.7
• CVE-2024-37030in OpenHarmony v4.0.0 and prior versions allow a remote atta…9.8
• CVE-2024-37031The Active Admin (aka activeadmin) framework before 3.2.2 fo…6.1
• CVE-2024-37034An issue was discovered in Couchbase Server before 7.2.5 and…5.9
• CVE-2024-37036CWE-787: Out-of-bounds Write vulnerability exists that could…9.8
• CVE-2024-37037CWE-22: Improper Limitation of a Pathname to a Restricted Di…8.1
• CVE-2024-37038CWE-276: Incorrect Default Permissions vulnerability exists …8.8
• CVE-2024-37039CWE-252: Unchecked Return Value vulnerability exists that co…7.5
• CVE-2024-3704SQL Injection Vulnerability has been found on OpenGnsys prod…9.8