CVE-2026-42249

Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading updates, the application constructs local file paths using values derived from HTTP headers without validation. These values are passed directly to filepath.Join, allowing path traversal sequences (../) to be resolved and enabling files to be written outside the intended update staging directory. An attacker who can influence update responses can exploit this flaw to write arbitrary executables to attacker‑chosen locations accessible to the current user, including the Windows Startup directory. This allows execution of arbitrary executables. Critically, when chained with CVE‑2026‑42248 (Missing Signature Verification for Updates), an attacker can deliver malicious payloads that are written to sensitive locations and executed automatically. Because Ollama for Windows performs silent automatic updates and executes staged binaries without user interaction, this results in automatic and persistent code execution without user awareness. Maintainers of this project were notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Versions from 0.12.10 to 0.17.5 were tested and confirmed as vulnerable, other versions were not tested but might also be vulnerable.

• CWE-22
• CWE-494

• https://cert.pl/en/posts/2026/04/CVE-2026-42248/Third Party Advisory
• https://ollama.com/Product

Published

Apr 29, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42239Budibase is an open-source low-code platform. Prior to versi…8.1
• CVE-2026-4224When an Expat parser with a registered ElementDeclHandler pa…7.5
• CVE-2026-42241ParquetSharp is a .NET library for reading and writing Apach…5.3
• CVE-2026-42245Net::IMAP implements Internet Message Access Protocol (IMAP)…7.5
• CVE-2026-42246Net::IMAP implements Internet Message Access Protocol (IMAP)…7.4
• CVE-2026-42248Ollama for Windows does not perform integrity or authenticit…9.8
• CVE-2026-4225A security flaw has been discovered in CMS Made Simple up to…2.4
• CVE-2026-42250bzip2 contains an off‑by‑one error in the bzip2recover utili…4.8
• CVE-2026-42251Use of hard-coded credentials in KS-SOMED allowed an unautho…8.7
• CVE-2026-42252Apache Airflow's official documentation at `core-concepts/da…9.1
• CVE-2026-42253Improper Neutralization of Input During Web Page Generation …6.1
• CVE-2026-42254Hickory DNS hickory-recursor 0.1 through 0.25.2 allows cross…4