exploit/windows/persistence/ollama_auto_update

weaponized

Ollama Windows Auto-Update Path Traversal Persistence

view exploit source metasploittype exploitpublished 2026-04-29catalog metasploit

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2026-42249US	critical9.8OT high	1.05% (64th)	Exploit	2026-04-29
Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers. When downloading up…
CVE-2026-42248US	critical9.8OT high	0.73% (54th)	Exploit	2026-04-29
Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables. Unlike other platforms, the Windows implementation of the update verifi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.