{"id":"CVE-2026-86289","title":"A vulnerability was found in Ollama up to 0.31.1","summary":"A vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible t…","severity":"medium","cvss":4.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cwe":["CWE-189","CWE-190"],"product":"Ollama","affected":["Ollama 0.31.0","Ollama 0.31.1"],"published":"2026-09-07","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:43.407","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86289","references":[{"url":"https://github.com/ollama/ollama/","label":"cna@vuldb.com"},{"url":"https://github.com/ollama/ollama/commit/67b6a1c2d45321e0cb3c04a18073f9818de7724b","label":"cna@vuldb.com"},{"url":"https://github.com/ollama/ollama/issues/17033","label":"cna@vuldb.com"},{"url":"https://github.com/ollama/ollama/pull/17062","label":"cna@vuldb.com"},{"url":"https://github.com/ollama/ollama/releases/tag/v0.31.2-rc1","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86289","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/906136","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399448","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399448/cti","label":"cna@vuldb.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-86289.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-86289"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86289"}],"tags":["nvd","cve.org","exploit-available","csaf","vex","red-hat"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"yes","technicalImpact":"partial","timestamp":"2026-09-11T20:02:57.609369Z"},"epss":0.00399,"epssPercentile":0.34001,"ingestedAt":"2026-09-08T15:33:26.975Z","vendor":"Red Hat","slug":"CVE-2026-86289","body":"## Overview\n\nA vulnerability was found in Ollama up to 0.31.1. This issue affects the function readGGUFV1String of the file fs/ggml/gguf.go of the component GGUF Decoder. Performing a manipulation results in integer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Upgrading to version 0.31.2-rc1 is capable of addressing this issue. The patch is named 67b6a1c2d45321e0cb3c04a18073f9818de7724b. It is recommended to upgrade the affected component.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · updated 2026-09-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-86289.json)","depth":"twilight","depthScore":36,"depthScoreParts":{"impact":23.7,"likelihood":0.1,"exploitation":12,"ransomware":0},"changes":[{"seq":202115,"id":"CVE-2026-86289","ts":1789400062912,"field":"exploit_available","old":"false","new":"true"},{"seq":200842,"id":"CVE-2026-86289","ts":1789397616890,"field":"exploit_available","old":"true","new":"false"},{"seq":199535,"id":"CVE-2026-86289","ts":1789395529446,"field":"exploit_available","old":"false","new":"true"},{"seq":198780,"id":"CVE-2026-86289","ts":1789392244659,"field":"exploit_available","old":"true","new":"false"},{"seq":197113,"id":"CVE-2026-86289","ts":1789384292850,"field":"exploit_available","old":"false","new":"true"},{"seq":196398,"id":"CVE-2026-86289","ts":1789383756739,"field":"exploit_available","old":"true","new":"false"},{"seq":195844,"id":"CVE-2026-86289","ts":1789380634654,"field":"exploit_available","old":"false","new":"true"},{"seq":194242,"id":"CVE-2026-86289","ts":1789378783532,"field":"exploit_available","old":"true","new":"false"},{"seq":193029,"id":"CVE-2026-86289","ts":1789376515568,"field":"exploit_available","old":"false","new":"true"},{"seq":191816,"id":"CVE-2026-86289","ts":1789373631565,"field":"exploit_available","old":"true","new":"false"},{"seq":190601,"id":"CVE-2026-86289","ts":1789369476341,"field":"exploit_available","old":"false","new":"true"},{"seq":189388,"id":"CVE-2026-86289","ts":1789368423889,"field":"exploit_available","old":"true","new":"false"},{"seq":188171,"id":"CVE-2026-86289","ts":1789365231252,"field":"exploit_available","old":"false","new":"true"},{"seq":186958,"id":"CVE-2026-86289","ts":1789363471744,"field":"exploit_available","old":"true","new":"false"},{"seq":185744,"id":"CVE-2026-86289","ts":1789361229609,"field":"exploit_available","old":"false","new":"true"},{"seq":184531,"id":"CVE-2026-86289","ts":1789358364260,"field":"exploit_available","old":"true","new":"false"},{"seq":182781,"id":"CVE-2026-86289","ts":1789354317679,"field":"exploit_available","old":"false","new":"true"},{"seq":181574,"id":"CVE-2026-86289","ts":1789353318192,"field":"exploit_available","old":"true","new":"false"},{"seq":180367,"id":"CVE-2026-86289","ts":1789350285235,"field":"exploit_available","old":"false","new":"true"},{"seq":179160,"id":"CVE-2026-86289","ts":1789348293400,"field":"exploit_available","old":"true","new":"false"},{"seq":177953,"id":"CVE-2026-86289","ts":1789346370513,"field":"exploit_available","old":"false","new":"true"},{"seq":176746,"id":"CVE-2026-86289","ts":1789343184972,"field":"exploit_available","old":"true","new":"false"},{"seq":174863,"id":"CVE-2026-86289","ts":1789334876174,"field":"exploit_available","old":"false","new":"true"},{"seq":173658,"id":"CVE-2026-86289","ts":1789333698865,"field":"exploit_available","old":"true","new":"false"},{"seq":172472,"id":"CVE-2026-86289","ts":1789331093543,"field":"exploit_available","old":"false","new":"true"},{"seq":171286,"id":"CVE-2026-86289","ts":1789328781343,"field":"exploit_available","old":"true","new":"false"},{"seq":170081,"id":"CVE-2026-86289","ts":1789327197646,"field":"exploit_available","old":"false","new":"true"},{"seq":168876,"id":"CVE-2026-86289","ts":1789323840609,"field":"exploit_available","old":"true","new":"false"},{"seq":167671,"id":"CVE-2026-86289","ts":1789319703142,"field":"exploit_available","old":"false","new":"true"},{"seq":166466,"id":"CVE-2026-86289","ts":1789318776608,"field":"exploit_available","old":"true","new":"false"},{"seq":165261,"id":"CVE-2026-86289","ts":1789315791302,"field":"exploit_available","old":"false","new":"true"},{"seq":164056,"id":"CVE-2026-86289","ts":1789313634733,"field":"exploit_available","old":"true","new":"false"},{"seq":162851,"id":"CVE-2026-86289","ts":1789311903947,"field":"exploit_available","old":"false","new":"true"},{"seq":161646,"id":"CVE-2026-86289","ts":1789308733665,"field":"exploit_available","old":"true","new":"false"},{"seq":159759,"id":"CVE-2026-86289","ts":1789300471030,"field":"exploit_available","old":"false","new":"true"},{"seq":158848,"id":"CVE-2026-86289","ts":1789299572111,"field":"exploit_available","old":"true","new":"false"},{"seq":158307,"id":"CVE-2026-86289","ts":1789296693168,"field":"exploit_available","old":"false","new":"true"},{"seq":156748,"id":"CVE-2026-86289","ts":1789294756161,"field":"exploit_available","old":"true","new":"false"},{"seq":155543,"id":"CVE-2026-86289","ts":1789292968421,"field":"exploit_available","old":"false","new":"true"},{"seq":154338,"id":"CVE-2026-86289","ts":1789289798051,"field":"exploit_available","old":"true","new":"false"},{"seq":151589,"id":"CVE-2026-86289","ts":1789277630328,"field":"exploit_available","old":"false","new":"true"},{"seq":150550,"id":"CVE-2026-86289","ts":1789276247207,"field":"exploit_available","old":"true","new":"false"},{"seq":149517,"id":"CVE-2026-86289","ts":1789273825194,"field":"exploit_available","old":"false","new":"true"},{"seq":148484,"id":"CVE-2026-86289","ts":1789271349234,"field":"exploit_available","old":"true","new":"false"},{"seq":146515,"id":"CVE-2026-86289","ts":1789269398516,"field":"exploit_available","old":"false","new":"true"},{"seq":145320,"id":"CVE-2026-86289","ts":1789266340714,"field":"exploit_available","old":"true","new":"false"},{"seq":144224,"id":"CVE-2026-86289","ts":1789262617207,"field":"exploit_available","old":"false","new":"true"},{"seq":143128,"id":"CVE-2026-86289","ts":1789261533905,"field":"exploit_available","old":"true","new":"false"},{"seq":141959,"id":"CVE-2026-86289","ts":1789258832344,"field":"exploit_available","old":"false","new":"true"},{"seq":140800,"id":"CVE-2026-86289","ts":1789256727599,"field":"exploit_available","old":"true","new":"false"}]}