OLLAMA PATCHES REMOTE EXECUTION VULNERABILITY

Summary from the TLDR InfoSec newsletter

Ollama recently fixed a vulnerability discovered by Wiz that could result in path traversal. The vulnerability exploits the lack of input validation in the /api/pull endpoint of the Ollama servers by using a specially crafted request to overwrite arbitrary files on the host system. Wiz's researchers note that there are still publicly exposed Ollama servers that are vulnerable to this flaw.